Beveiligingsadvies

CVE-2026-86098

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-04 22:38:48
Laatst bijgewerkt 2026-09-04 22:38:48
Toegewezen door VulnCheck
CVSS-score 8.3
Status PUBLISHED

Beschrijving

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.