Description
Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS).
This issue affects N-central: before 26.4.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| N-able | N-central | < 26.4.1 | 26.4.1 |
Advisories 2
- NCSC-2026-0478 Kwetsbaarheden verholpen in N-able N-central NCSC-NL (Netherlands) · Nov 11, 2026
- WID-SEC-2026-4440 N-able N-Central: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026