https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:30:27.858460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333439 EUVD-2026-333439 2026-10-04T16:30:27.979501+00:00 EUVD-2026-333439 https://cve.radiocsirt.org/vuln/fkie_cve-2026-38968 fkie_cve-2026-38968 2026-10-04T16:30:27.979542+00:00

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.

 https://cve.radiocsirt.org/vuln/ghsa-5rrm-76q9-hp77 GHSA-5rrm-76q9-hp77 2026-10-04T16:30:27.979576+00:00

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-38968 msrc_CVE-2026-38968 — ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session id… 2026-10-04T16:30:27.979593+00:00 msrc_CVE-2026-38968 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-38968 UBUNTU-CVE-2026-38968 2026-10-04T16:30:27.979613+00:00

Affected: Ubuntu:Pro:16.04:LTS: ntopng, Ubuntu:Pro:18.04:LTS: ntopng, Ubuntu:20.04:LTS: ntopng, Ubuntu:22.04:LTS: ntopng, Ubuntu:24.04:LTS: ntopng, Ubuntu:25.10: ntopng

ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.