Read the docs

N-able

Records24All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

N-able records in CISA KEV
TI-2026-59007 N-able N-central Static Code Injection Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-15214 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 95KEV 2026-08-04TI-2026-15225 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 95KEV 2026-08-03TI-2025-08125 N-able N-Central Insecure Deserialization Vulnerability Priority CRITICAL 100KEV 2025-08-13TI-2025-08126 N-able N-Central Command Injection Vulnerability Priority CRITICAL 100KEV 2025-08-13

Components

Products in the NVD configurations · select one to filter the records
N-central 15 records CRITICAL Automation Manager 1 record LOW Passportal 1 record LOW Take Control 1 record HIGH

Records

1 record in Automation Manager · all components

TI-2023-18874 CVE-2023-37244 · GHSA-5464-6852-r995

Privilege escalation in N-Able's AutomationManagerAgent

Priority LOW 30

The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Tem…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00233 Published 2024-05-02 No fix listed CWE-362
Open these records in search →