Ntop vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ntop products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-38968 Critical · 9.8 CWE-341 Jul 2, 2026

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to…

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.

CVE-2026-45448 Medium · 4.3 CWE-601 May 14, 2026

ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CWE-601 URL redirection to untrusted site ('open redirect')