CVE-2026-82412 | ntop ntopng up to 6.7.260716 Vulnerability Scan to_scan.lua nmap_scan_host scan_ports os command injection

September 21, 2026 Yanac

A vulnerability classified as very critical has been found in ntop ntopng up to 6.7.260716. Affected by this vulnerability is the function nmap_scan_host of the file scripts/lua/rest/v2/add/host/to_scan.lua of the component Vulnerability Scan. The manipulation of the argument scan_ports leads to os command injection.

This vulnerability is referenced as CVE-2026-82412. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More