Read the docs

N-able

Records24All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

N-able records in CISA KEV
TI-2026-59007 N-able N-central Static Code Injection Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-15214 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 95KEV 2026-08-04TI-2026-15225 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 95KEV 2026-08-03TI-2025-08125 N-able N-Central Insecure Deserialization Vulnerability Priority CRITICAL 100KEV 2025-08-13TI-2025-08126 N-able N-Central Command Injection Vulnerability Priority CRITICAL 100KEV 2025-08-13

Components

Products in the NVD configurations · select one to filter the records
N-central 15 records CRITICAL Automation Manager 1 record LOW Passportal 1 record LOW Take Control 1 record HIGH

Records

1 record in Take Control · all components

TI-2023-12199 CVE-2023-27470 · GHSA-2vhw-q36q-j3v5

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a…

Priority HIGH 66

BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file del…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00526 Published 2023-09-11 No fix listed CWE-367
Open these records in search →