[Git][security-tracker-team/security-tracker][master] Add CVE-2026-38968/ntopng

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
27916885 by Salvatore Bonaccorso at 2026-07-03T20:22:25+02:00
Add CVE-2026-38968/ntopng

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -105,7 +105,9 @@ CVE-2026-38969 (ruby webrick through v1.9.2 WEBrick reparses trailer Content-Len
 	NOTE: https://github.com/ruby/webrick/issues/198
 	NOTE: https://github.com/ruby/webrick/pull/199
 CVE-2026-38968 (ntopng through 6.6 is vulnerable to Predictable Session Identifier whi ...)
-	TODO: check
+	- ntopng <unfixed>
+	NOTE: https://github.com/ntop/ntopng/commit/179a346ceb6239fd36128ccca3efa8f9ea61eeb5
+	NOTE: https://github.com/ntop/ntopng/commit/14e22497233dc7d31d19dccb74b13bb073d16c2c
 CVE-2026-26145 (Improper access control in Azure Synapse allows an authorized attacker ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-14352 (The AR for WooCommerce plugin for WordPress is vulnerable to Directory ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27916885770cda44cc130bdf42532678dd96da0f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27916885770cda44cc130bdf42532678dd96da0f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/81cac233/attachment.htm>