3 results · Clear filters · Feed
-
Medium 6.9CVE-2026-86206 Scanner template
Access control filter bypass allows unauthorised access to APIs
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
-
Medium 6.9
N-central unauthenticated sessionID generation
N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.
-
Medium 5.3
N-central Path Traversal
N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.