CVE-2026-82412

ntopng , a web-based network traffic monitoring application, is affected by an OS command injection in its vulnerability-scan REST API prior to version 6.7.260717 . The endpoints add/host/to_scan.lua and exec/host/schedule_vulnerability_scan.lua accept the scan_ports parameter without an administ...