Skip to content
OpenAdvisories

Vendor

N-able

28 known vulnerabilities.

Products

N-central 24 Ecosystem Agent 1 AutomationManagerAgent 1 Mail Assure 1 PassPortal 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-68624

    N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user…

    N-able Mail Assure
  • Medium 6.9
    CVE-2026-86206

    Access control filter bypass allows unauthorised access to APIs

    A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

    N-able N-central
  • Medium 6.9
    CVE-2026-15580

    PassPortal browser extension: vault token disclosure via unvalidated postMessage

    vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6.

    N-able PassPortal
  • Medium 6.9
    CVE-2025-9316 Public exploit EPSS 37%

    N-central unauthenticated sessionID generation

    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

    N-able N-central
  • Medium 5.3
    CVE-2024-8510

    N-central Path Traversal

    N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

    N-able N-central
  • Medium 5.3
    CVE-2023-37244

    Privilege escalation in N-Able's AutomationManagerAgent

    The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp, which could be leveraged by an attac…

    N-able AutomationManagerAgent