Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: N-able N-central 2025.4 Clear all filters
TI-2025-10414 CVE-2025-11367 · GHSA-qcq9-338f-m287

N-central windows software probe Remote Code Execution

Priority MEDIUM 50

The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00627 Published 2025-11-12 Fixed in 2025.4 CWE-502
TI-2025-10413 CVE-2025-11366 · GHSA-5wq3-vvw9-27jh

N-central Authentication bypass via path traversal

Priority MEDIUM 49

N-central < 2025.4 is vulnerable to authentication bypass via path traversal

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00604 Published 2025-11-12 Fixed in 2025.4 CWE-22
TI-2025-10725 CVE-2025-11700 · GHSA-89f8-292w-gfh4

N-central Multiple XXE Injection Vulnerabilities

Priority HIGH 67

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.31682 Published 2025-11-12 Fixed in 2025.4 CWE-611
TI-2025-08540 CVE-2025-9316 · GHSA-9vwr-g237-h5c9

N-central unauthenticated sessionID generation

Priority MEDIUM 63

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.37387 Published 2025-11-12 Fixed in 2025.4 CWE-1284