Skip to content
OpenAdvisories

Vendor

N-able

28 known vulnerabilities.

Products

N-central 24 Ecosystem Agent 1 AutomationManagerAgent 1 Mail Assure 1 PassPortal 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-125881

    Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request Forgery. This issue aff…

    N-able N-central
  • Critical 9.3
    CVE-2026-125883

    Multiple XXE Vulnerabilities

    Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1.

    N-able N-central
  • Critical 10.0
    CVE-2026-86218 Exploited Public exploit Scanner template EPSS 15%

    pre-authentication remote code execution

    N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

    N-able N-central
    KEV Sep 8, 2026
  • Critical 10.0
    CVE-2025-11367

    N-central windows software probe Remote Code Execution

    The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization

    N-able N-central
  • Critical 9.4
    CVE-2025-11366

    N-central Authentication bypass via path traversal

    N-central < 2025.4 is vulnerable to authentication bypass via path traversal

    N-able N-central
  • Critical 9.4
    CVE-2025-8875 Exploited Public exploit

    Insecure Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

    N-able N-central
    KEV Aug 13, 2025
  • Critical 9.4
    CVE-2025-8876 Exploited

    Command Injection Vulnerability

    Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.

    N-able N-central
    KEV Aug 13, 2025
  • Critical 9.1
    CVE-2024-28200 Scanner template

    N-central Authentication Bypass

    The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has…

    N-able N-central
  • Critical 9.1
    CVE-2024-5322

    N-central Authentication Bypass via Session Rebinding

    The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.

    N-able N-central