Skip to content
N-able N-central vulnerabilities
-
n-able n-central
pre-authentication remote code execution
CVE-2026-86218
In KEVPublic exploit
EPSS 15.4%
10.0 Critical
-
n-able n-central
Access control filter bypass allows unauthorised access to APIs
CVE-2026-86206
6.9 Medium
-
n-able n-central
Authentication bypass leads to unauthorised access to N-central
CVE-2026-86207
7.7 High
-
n-able n-central
Incomplete patch leads to administrative account takeover
CVE-2026-18577
In KEVPublic exploit
EPSS 14.6%
8.2 High
-
n-able n-central
Unauthenticated administrative account takeover
CVE-2026-18556
In KEVPublic exploit
8.2 High
-
n-able n-central
N-central windows software probe Remote Code Execution
CVE-2025-11367
10.0 Critical
-
n-able n-central
N-central Authentication bypass via path traversal
CVE-2025-11366
9.4 Critical
-
n-able n-central
N-central Multiple XXE Injection Vulnerabilities
CVE-2025-11700
EPSS 31.7%
8.4 High
-
n-able n-central
N-central unauthenticated sessionID generation
CVE-2025-9316
Public exploit
EPSS 37.4%
6.9 Medium
-
n-able n-central
N-central Incorrect Default Permissions could lead to Privilege Escalation
CVE-2025-10231
7.0 High
-
n-able n-central
N-central Syslog Configuration Insecure Direct Object Reference
CVE-2025-7051
8.3 High
-
n-able n-central
Insecure Deserialization Vulnerability
CVE-2025-8875
In KEVPublic exploit
9.4 Critical
-
n-able n-central
Command Injection Vulnerability
CVE-2025-8876
In KEV
9.4 Critical
-
n-able n-central
N-central Path Traversal
CVE-2024-8510
5.3 Medium
-
n-able n-central
N-central Authentication Bypass
CVE-2024-28200
9.1 Critical
-
n-able n-central
N-central Authentication Bypass via Session Rebinding
CVE-2024-5322
9.1 Critical
-
n-able n-central
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain...
CVE-2023-47132
9.8 Critical
-
n-able n-central
An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to...
CVE-2023-30297
7.0 High