n
ntopng
Security Risk Profile
63
/100
highSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 2, 2026 to present
5
Total CVEs
5
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
63/100
high
📈 2 in Last 30 Days
Severity Distribution
Critical
1High
4Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
1
2
CSRF
1
3
Command Injection
1
Most Affected Products
1. ntopng ntopng5
2. Microsoft azl3 ntopng 5.2.1-61
3. Microsoft azl3 ntopng 5.2.1-71
4. ntop ntopng1
Recent Vulnerabilities
See more →CVE-2026-83621
CVSS 8.1high
ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs
Sep 21, 2026🔧 No Patch
CVE-2026-82412
CVSS 8.8high
ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API
Sep 21, 2026🔧 No Patch
CVE-2026-86090
CVSS 7.1high
ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
Sep 4, 2026
CVE-2026-84989
CVSS 7.1high
ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags
Sep 3, 2026🔧 No Patch
CVE-2026-38968
CVSS 9.8critical
Jul 2, 2026
Monitor ntopng in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.