{"vulnerability": "CVE-2026-86091", "sightings": [{"uuid": "8828a2bc-d79b-4537-96b2-1c826d041ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutdkg5dke2l", "content": "ntopng: apply patch for CVE-2026-86091 CVE-2026-86090\n\nhttps://github.com/NixOS/nixpkgs/pull/560316\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2510\n\n#security", "creation_timestamp": "2026-09-06T06:11:54.108372Z"}, {"uuid": "8a4538e7-5e08-40e5-badd-a57b16de687d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutgolfbcq2x", "content": "[Backport release-26.05] ntopng: apply patch for CVE-2026-86091 CVE-2026-86090\n\nhttps://github.com/NixOS/nixpkgs/pull/560432\n\n#security", "creation_timestamp": "2026-09-06T07:07:56.092033Z"}, {"uuid": "b54cd57d-539f-41a5-912b-03687ba2480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3huhsxyv2t", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:24.529817Z"}, {"uuid": "26cb14da-a155-405f-a075-9e28f331f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117240930233128852", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:27.256852Z"}]}