CVE-2026-86098

HighCVSS 7.4

Published: 04/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 05/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

29th percentile - higher than 29% of all known CVEs

Summary

ntop nDPI before version 6.0 has a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger it with crafted network packets containing TLS SNI, HTTP headers, or DNS names, causing heap corruption.

Risk Assessment

The vulnerability can be exploited remotely to corrupt memory, potentially leading to crashes or arbitrary code execution in the context of the network processing application. This poses a serious security risk.

Recommendation

Upgrade ntop nDPI to version 6.0 or later to fix the buffer overflow.

Other vulnerabilities in ntop nDPI

CVE-2026-116744Medium
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp to read beyond the packet payload buffer.

Original NVD description (English source)

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS