CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

ntop — security advisories

1 advisorieslatest 2026-07-02⚡ RSS feed

Tracked ntop products:

⚡ Watch ntop

Get an email when a new ntop advisory drops — max one per day, one-click unsubscribe.

CVE-2026-38968: ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.

criticalCVSS 9.8CVE-2026-38968msrc2026-07-02