N
Vendor security profile
ntop
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit1
Patch rate%50
Avg. CVSS8.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
0
5
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High5 (83%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%17
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
8.8
CVE-2026-84990
ntopng: Missing Authorization on System Configuration Backup Download and Listing
N
Patch status unknownEPSS %0
8.1
CVE-2026-83621
ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs
N
Patch status unknownEPSS %1
8.8
CVE-2026-82412
ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API
N
Patch status unknownEPSS %1
8.3
CVE-2026-86098
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
N
Patch verifiedEPSS %1
7.1
CVE-2026-86090
ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
N
Patch verifiedEPSS %0
8.8
CVE-2026-66421
OpenClaw Dashboard Stored XSS via lastMessage Session Field
T
Patch status unknownEPSS %1
9.3
CVE-2026-66418
OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field
T
Patch status unknownEPSS %1
9.8
CVE-2026-38968
Vulnerability in Ntopng
N
Patch verifiedEPSS %1