{"vulnerability": "CVE-2026-86090", "sightings": [{"uuid": "32fccfd7-0e55-465d-b62a-1da32d037e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutdkg5dke2l", "content": "ntopng: apply patch for CVE-2026-86091 CVE-2026-86090\n\nhttps://github.com/NixOS/nixpkgs/pull/560316\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2510\n\n#security", "creation_timestamp": "2026-09-06T06:11:54.158815Z"}, {"uuid": "531dfcbd-5b32-4aed-aa6b-64d0ea266651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutgolfbcq2x", "content": "[Backport release-26.05] ntopng: apply patch for CVE-2026-86091 CVE-2026-86090\n\nhttps://github.com/NixOS/nixpkgs/pull/560432\n\n#security", "creation_timestamp": "2026-09-06T07:07:56.140576Z"}, {"uuid": "6d1693ec-11b2-4c47-9d06-741626d6350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244625094933654", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.591448Z"}, {"uuid": "3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv54eo74uz2v", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.601021Z"}]}