CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

ntopng — security advisories

vendor: ntop1 advisories1 sourcelatest 2026-07-02⚡ RSS feed

Every advisory CSIRTS.com has correlated to ntopng, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch ntopng

Get an email when a new ntopng advisory drops — max one per day, one-click unsubscribe.

CVE-2026-38968: ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.

criticalCVSS 9.8CVE-2026-38968msrc2026-07-02