All 7 CVE vulnerabilities found in ntopng, with AI-generated Chinese analysis, references, and POCs.
Vendor: ntop
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-84990 | ntopng: Missing Authorization on System Configuration Backup Download and Listing CWE-200 | 8.8 | High | 2026-09-21 |
| CVE-2026-83621 | ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs CWE-862 | 8.1 | High | 2026-09-21 |
| CVE-2026-82412 | ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API CWE-78 | 8.8 | High | 2026-09-21 |
| CVE-2026-86091 | ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler CWE-862 | 7.1 | High | 2026-09-04 |
| CVE-2026-86090 | ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers CWE-862 | 7.1 | High | 2026-09-04 |
| CVE-2026-84989 | ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags CWE-862 | 7.1 | High | 2026-09-03 |
| CVE-2026-45448 | ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CWE-601 | 4.3 | Medium | 2026-05-14 |
All 7 known CVE vulnerabilities affecting ntopng with full Chinese analysis, references, and POCs where available.