CVEs published by N-able

CVEs published by N-able (CVE Numbering Authority). 7 tracked.

CVE-2026-18577 HIGH 8.1 EXPLOITED UPGRADE N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-18556 HIGH 7.4 EXPLOITED UPGRADE N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2025-11700 HIGH 7.5 UPGRADE N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information
CVE-2025-9316 MEDIUM 6.9 N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before
CVE-2025-11367 CRITICAL 9.8 UPGRADE The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
CVE-2025-11366 CRITICAL 9.8 UPGRADE N-central < 2025.4 is vulnerable to authentication bypass via path traversal
CVE-2026-86218 CRITICAL 9.8 EXPLOITED UPGRADE N-able N-central Static Code Injection Vulnerability