Skip to content
OpenAdvisories
High · 8.7 CVE-2026-125878 EUVD-2026-122958GHSA-45mv-4c64-gcfp

Multiple OGNL Injection vulnerabilities

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by N-able

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection.

This issue affects N-central: before 26.4.1.

Affected products

VendorProductAffectedFixed
N-able N-central < 26.4.1 26.4.1

Advisories 2

References