CVE-2026-82413 - ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)
CVE ID :CVE-2026-82413 Published : Nov. 5, 2026, 5:18 p.m. | 1 hour, 50 minutes ago Description :ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts/lua/rest/v2/add/host/to_scan.lua and scripts/lua/rest/v2/exec/host/schedule_vulnerability_scan.lua accept...