Vulnerabilidades do Ntop Ntopng
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ntop Ntopng: 2 registro(s), com versões afetadas e correções.
CVE-2026-38968
Crítica · 9.8
CWE-341 02/07/2026
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to…
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.
CVE-2026-45448
Média · 4.3
CWE-601 14/05/2026
ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 URL redirection to untrusted site ('open redirect')