N-able N-central
16 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-86218 | < 2026.3.1.14 | pre-authentication remote code execution | CRITICAL 10.0 | 15 % | KEV | |
| CVE-2026-86206 | < 2026.3.1.13 | Access control filter bypass allows unauthorised access to APIs | MEDIUM 6.9 | 1.1 % | ||
| CVE-2026-86207 | < 2026.3.1.13 | Authentication bypass leads to unauthorised access to N-central | HIGH 7.7 | 1.3 % | ||
| CVE-2026-18577 | ≤ 2026.3 | Incomplete patch leads to administrative account takeover | HIGH 8.2 | 15 % | KEV | |
| CVE-2026-18556 | ≤ 2026.1 | Unauthenticated administrative account takeover | HIGH 8.2 | 7.9 % | KEV | |
| CVE-2025-11367 | < 2025.4 | N-central windows software probe Remote Code Execution | CRITICAL 10.0 | 0.6 % | ||
| CVE-2025-11366 | < 2025.4 | N-central Authentication bypass via path traversal | CRITICAL 9.4 | 0.6 % | ||
| CVE-2025-11700 | < 2025.4 | N-central Multiple XXE Injection Vulnerabilities | HIGH 8.4 | 32 % | ||
| CVE-2025-9316 | < 2025.4 | N-central unauthenticated sessionID generation | MEDIUM 6.9 | 37 % | ||
| CVE-2025-10231 | < 2025.3 | N-central Incorrect Default Permissions could lead to Privilege Escalation | HIGH 7.8 | 0.1 % | ||
| CVE-2025-7051 | 2024.6.0 – 2024.6.16 ; 2025.1 | N-central Syslog Configuration Insecure Direct Object Reference | HIGH 8.3 | 0.3 % | ||
| CVE-2025-8875 | < 2025.3.1 | Insecure Deserialization Vulnerability | CRITICAL 9.4 | 1.9 % | KEV | |
| CVE-2025-8876 | < 2025.3.1 | Command Injection Vulnerability | CRITICAL 9.4 | 3.4 % | KEV | |
| CVE-2024-8510 | < 2024.6 | N-central Path Traversal | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-28200 | <2024.2 | N-central Authentication Bypass | CRITICAL 9.8 | 1.9 % | ||
| CVE-2024-5322 | <2024.3 | N-central Authentication Bypass via Session Rebinding | CRITICAL 9.1 | 0.4 % |