Skip to content
OpenAdvisories

Product · N-able

N-central

24 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-86206 Scanner template

    Access control filter bypass allows unauthorised access to APIs

    A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

  • Medium 6.9
    CVE-2025-9316 Public exploit Scanner template EPSS 37%

    N-central unauthenticated sessionID generation

    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

  • Medium 5.3

    N-central Path Traversal

    N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.