UBUNTU-CVE-2026-84989

ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature — POST /lua/rest/v2/delete/tag/tag.lua and POST /lua/rest/v2/edit/tag/tag.lua — perform no authorization check at all. Any authenticated...

PT-2026-85056

Name of the Vulnerable Software and Affected Versions ntopng versions 6.7.0 through 6.7.260717 Description Two REST v2 endpoints used to manage the tag/badge feature lack authorization checks. This allows any authenticated user, including those with unprivileged accounts, to delete or rename any...