https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T10:03:00.899777+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-86090 fkie_cve-2026-86090 2026-09-30T10:03:00.924938+00:00

ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-administrator users can issue POST requests to irreversibly delete all configured notification endpoints and recipients, silencing all alerts.

 https://db.gcve.eu/vuln/ghsa-jh82-5ccp-7w4v GHSA-jh82-5ccp-7w4v 2026-09-30T10:03:00.924998+00:00

ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-administrator users can issue POST requests to irreversibly delete all configured notification endpoints and recipients, silencing all alerts.

 https://db.gcve.eu/vuln/msrc_cve-2026-86090 msrc_CVE-2026-86090 — ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers 2026-09-30T10:03:00.925018+00:00 msrc_CVE-2026-86090 https://db.gcve.eu/vuln/ubuntu-cve-2026-86090 UBUNTU-CVE-2026-86090 2026-09-30T10:03:00.925043+00:00

Affected: Ubuntu:Pro:16.04:LTS: ntopng, Ubuntu:Pro:18.04:LTS: ntopng, Ubuntu:20.04:LTS: ntopng, Ubuntu:22.04:LTS: ntopng, Ubuntu:24.04:LTS: ntopng

ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-administrator users can issue POST requests to irreversibly delete all configured notification endpoints and recipients, silencing all alerts.