Vulnerabilidades de Ntop
CVEs publicadas que afetam produtos de Ntop: 2 registro(s), com severidade, exploração e correções.
CVE-2026-38968
Crítica · 9.8
CWE-341 02/07/2026
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to…
ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.
CVE-2026-45448
Média · 4.3
CWE-601 14/05/2026
ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 URL redirection to untrusted site ('open redirect')