Stack Corruption in ntopng Network Monitoring Application

CVE-2026-97371

What is CVE-2026-97371?

The ntopng application, a robust web-based tool for monitoring network traffic, has a vulnerability that allows remote unauthenticated attackers to exploit packet dissection functionalities. Specifically, a flaw in the ndpi_get_custom_category_match function could lead to writing a four-byte nDPI protocol-category value incorrectly into a two-byte variable. This mismanagement results in stack corruption during the initialization of host data, enabling potential denial-of-service attacks without user interaction. The issue was addressed in version 6.7.260721, underscoring the need for users to upgrade to secure their environments.

References