{"vulnerability": "CVE-2026-86098", "sightings": [{"uuid": "73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv4c4nfww72f", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI <6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure & monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:16.067021Z"}, {"uuid": "b734bdf9-4b39-4a02-87df-4b3fa12a2a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242777798627415", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI <6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure & monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:22.988746Z"}]}