CVE-2026-97371 · Package
NO FIX YET · SEE WHAT TO DO
ntopng writes a four-byte protocol-category value into a two-byte variable on the stack when it dissects packets that match custom-category rules. A remote, unauthenticated attacker on a monitored network segment can send such packets and corrupt the stack, causing a denial of service.
first public Jul 21, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Teams running ntopng to monitor network traffic, especially where a monitored segment can be reached by untrusted hosts. The flaw is reached during packet dissection and host initialization, and only packets matching custom-category rules trigger the bad write, so deployments without custom categories are less exposed. Teams on ntopng 6.7.260721 or later are not affected.
Not affected if fixed-version, no-custom-categories
Who cares network-monitoring, ntopng, self-hosted
ntopng --version and compare it with the fixed version below.6.7.260721ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_match writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host initialization. A remote unauthenticated attacker on a monitored network segment can send packets that match custom-category rules, causing stack corruption and denial of service without user interaction. This issue is fixed in version 6.7.260721.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.