N-able

6 results · Clear filters · Feed

• Critical 10.0
  CVE-2026-86218 Exploited Public exploit EPSS 15%

  pre-authentication remote code execution

  N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

  N-able N-central
  Sep 6, 2026

  KEV Sep 8, 2026
• High 8.2
  CVE-2026-18577 Exploited Public exploit EPSS 15%

  Incomplete patch leads to administrative account takeover

  An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

  N-able N-central
  Aug 2, 2026

  KEV Aug 3, 2026
• High 8.2
  CVE-2026-18556 Exploited Public exploit

  Unauthenticated administrative account takeover

  Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

  N-able N-central
  Aug 1, 2026

  KEV Aug 4, 2026
• High 8.4
  CVE-2025-11700 Public exploit EPSS 32%

  N-central Multiple XXE Injection Vulnerabilities

  N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

  N-able N-central
  Nov 12, 2025
• Medium 6.9
  CVE-2025-9316 Public exploit EPSS 37%

  N-central unauthenticated sessionID generation

  N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

  N-able N-central
  Nov 12, 2025
• Critical 9.4
  CVE-2025-8875 Exploited Public exploit

  Insecure Deserialization Vulnerability

  Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

  N-able N-central
  Aug 14, 2025

  KEV Aug 13, 2025