Repository navigation
Security: ntop/ntopng
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
CSRF protection bypass in multipart requests allows administrator account creationGHSA-xgj4-h7r8-r4xv published
Oct 26, 2026 by cardiglianoHigh -
Missing authorization on global network/ASN configuration endpoints allows unprivileged users to modify administrative settingsGHSA-jhqh-96m3-xhfg published
Oct 23, 2026 by cardiglianoModerate -
An sFlow datagram with an unbounded MPLS label-stack depth reads past the bufferGHSA-5xr5-wqhx-fpxm published
Oct 8, 2026 by lucaderiHigh -
OS command injection in vulnerability scan exec_netscan via host parameter (incomplete fix bypass)GHSA-p4gm-6qx7-gq3m published
Aug 3, 2026 by cardiglianoModerate -
Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packetsGHSA-26jm-9qfw-89w7 published
Jul 21, 2026 by cardiglianoModerate -
Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary TagsGHSA-43p9-5758-wwq8 published
Jul 17, 2026 by cardiglianoHigh -
Missing Authorization on System Configuration Backup Download and ListingGHSA-7gqc-vjwr-6rh5 published
Jul 17, 2026 by cardiglianoHigh -
Remote Code Execution via OS Command Injection in Vulnerability-Scan REST APIGHSA-2c6p-4pfj-qv58 published
Jul 16, 2026 by cardiglianoHigh -
Authenticated (Non-Admin) Users Can Run Vulnerability-ScanGHSA-9xj6-f266-r46p published
Jul 16, 2026 by cardiglianoHigh -
Stored XSS via network-harvested host names in the Hosts viewGHSA-89wv-w893-9fvq published
Oct 8, 2026 by lucaderiHigh
Learn more about advisories related to ntop/ntopng in the GitHub Advisory Database