Ntop nDPI vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ntop nDPI: 1 record(s), with affected versions and fixes.

CVE-2026-86098 High · 7.4 CWE-787 Sep 4, 2026

ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.