{"id":"CVE-2026-86098","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-86098","summary":"ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can…","details":"ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.","published":"2026-09-04T23:18:03.687","modified":"2026-09-04T23:18:03.687","cvss":{"score":7.4,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/ntop/nDPI/commit/94e82c1de12323d992895830231865736a8abf2c","label":"ntop/nDPI@94e82c1"},"references":[{"type":"WEB","url":"https://github.com/ntop/nDPI"},{"type":"WEB","url":"https://github.com/ntop/nDPI/blob/5.0/src/lib/ndpi_serializer.c"},{"type":"WEB","url":"https://github.com/ntop/nDPI/commit/94e82c1de12323d992895830231865736a8abf2c"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/ntop-ndpi-before-6.0-heap-buffer-overflow-via-ndpi-json-string-escape"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-04T23:18:03.687"}}