CVE-2026-38968
Vulnerability in Ntopng
CVSS score
9.8
EPSS probability
%0.6
Risk score
0.1
Published
3 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.8
CVE-2026-82412
ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API
N
Patch status unknownEPSS %1
8.3
CVE-2026-86098
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
N
Patch verifiedEPSS %1
8.1
CVE-2026-83621
ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs
N
Patch status unknownEPSS %1
7.1
CVE-2026-86090
ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
N
Patch verifiedEPSS %0
8.8
CVE-2026-84990
ntopng: Missing Authorization on System Configuration Backup Download and Listing
N
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-38968"