agentprime: ntopngEvery new CVE for ntopng.https://agentprime.io/CVE-2026-97371: ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packetshttps://agentprime.io/advisories/CVE-2026-97371/https://agentprime.io/advisories/CVE-2026-97371/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:06:00 GMTCVECVE-2026-82413: ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)https://agentprime.io/advisories/CVE-2026-82413/https://agentprime.io/advisories/CVE-2026-82413/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:04:14 GMTCVECVE-2026-84990: ntopng: Missing Authorization on System Configuration Backup Download and Listinghttps://agentprime.io/advisories/CVE-2026-84990/https://agentprime.io/advisories/CVE-2026-84990/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 16:09:20 GMTCVECVE-2026-83621: ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLshttps://agentprime.io/advisories/CVE-2026-83621/https://agentprime.io/advisories/CVE-2026-83621/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 16:08:23 GMTCVECVE-2026-82412: ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST APIhttps://agentprime.io/advisories/CVE-2026-82412/https://agentprime.io/advisories/CVE-2026-82412/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 15:56:26 GMTCVECVE-2026-86091: ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handlerhttps://agentprime.io/advisories/CVE-2026-86091/https://agentprime.io/advisories/CVE-2026-86091/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 21:48:47 GMTCVECVE-2026-86090: ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlershttps://agentprime.io/advisories/CVE-2026-86090/https://agentprime.io/advisories/CVE-2026-86090/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 21:48:46 GMTCVECVE-2026-84989: ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tagshttps://agentprime.io/advisories/CVE-2026-84989/https://agentprime.io/advisories/CVE-2026-84989/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:47:01 GMTCVECVE-2026-45448: ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')https://agentprime.io/advisories/CVE-2026-45448/https://agentprime.io/advisories/CVE-2026-45448/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:48:18 GMTCVE