Skip to content
OpenAdvisories

Vendor

N-able

28 known vulnerabilities.

Products

N-central 24 Ecosystem Agent 1 AutomationManagerAgent 1 Mail Assure 1 PassPortal 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-18577 Exploited Public exploit EPSS 15%

    Incomplete patch leads to administrative account takeover

    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

    N-able N-central
    KEV Aug 3, 2026
  • High 8.2
    CVE-2026-18556 Exploited Public exploit

    Unauthenticated administrative account takeover

    Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

    N-able N-central
    KEV Aug 4, 2026
  • High 8.4
    CVE-2025-11700 Public exploit EPSS 32%

    N-central Multiple XXE Injection Vulnerabilities

    N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

    N-able N-central