N-able vulnerabilities

Products

• N-central 18
• Passportal 2

Newest

• n-able mail assure N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an... CVE-2025-68624 Disputed 4.3 MediumSeptember 14, 2026
• n-able n-central pre-authentication remote code execution CVE-2026-86218 In KEVPublic exploit EPSS 15.4% 10.0 CriticalSeptember 6, 2026
• n-able n-central Access control filter bypass allows unauthorised access to APIs CVE-2026-86206 6.9 MediumSeptember 5, 2026
• n-able n-central Authentication bypass leads to unauthorised access to N-central CVE-2026-86207 7.7 HighSeptember 5, 2026
• n-able passportal PassPortal browser extension: vault token disclosure via unvalidated postMessage CVE-2026-15580 6.9 MediumAugust 21, 2026
• n-able n-central Incomplete patch leads to administrative account takeover CVE-2026-18577 In KEVPublic exploit EPSS 14.6% 8.2 HighAugust 2, 2026
• n-able n-central Unauthenticated administrative account takeover CVE-2026-18556 In KEVPublic exploit 8.2 HighAugust 1, 2026
• n-able n-central N-central windows software probe Remote Code Execution CVE-2025-11367 10.0 CriticalNovember 12, 2025
• n-able n-central N-central Authentication bypass via path traversal CVE-2025-11366 9.4 CriticalNovember 12, 2025
• n-able n-central N-central Multiple XXE Injection Vulnerabilities CVE-2025-11700 EPSS 31.7% 8.4 HighNovember 12, 2025
• n-able n-central N-central unauthenticated sessionID generation CVE-2025-9316 Public exploit EPSS 37.4% 6.9 MediumNovember 12, 2025
• n-able n-central N-central Incorrect Default Permissions could lead to Privilege Escalation CVE-2025-10231 7.0 HighSeptember 10, 2025
• n-able n-central N-central Syslog Configuration Insecure Direct Object Reference CVE-2025-7051 8.3 HighAugust 21, 2025
• n-able n-central Insecure Deserialization Vulnerability CVE-2025-8875 In KEVPublic exploit 9.4 CriticalAugust 14, 2025
• n-able n-central Command Injection Vulnerability CVE-2025-8876 In KEV 9.4 CriticalAugust 14, 2025
• n-able n-central N-central Path Traversal CVE-2024-8510 5.3 MediumMarch 17, 2025
• n-able ecosystem agent Ecosystem Agent Insufficient Transport Layer Security CVE-2024-5445 3.8 LowAugust 8, 2024
• n-able n-central N-central Authentication Bypass CVE-2024-28200 9.1 CriticalJuly 1, 2024
• n-able n-central N-central Authentication Bypass via Session Rebinding CVE-2024-5322 9.1 CriticalJuly 1, 2024
• n-able automationmanageragent, automation manager, automation manager agent +2 more Privilege escalation in N-Able's AutomationManagerAgent CVE-2023-37244 5.3 MediumMay 2, 2024
• n-able n-central An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain... CVE-2023-47132 9.8 CriticalFebruary 8, 2024
• n-able passportal The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log... CVE-2023-47131 7.5 HighFebruary 8, 2024
• n-able take control BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU... CVE-2023-27470 Public exploit 7.0 HighSeptember 11, 2023
• n-able n-central An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to... CVE-2023-30297 7.0 HighAugust 3, 2023