en
N-able is a global technology solutions provider focused on cloud-based IT management and security for MSPs. It emerged from the SolarWinds MSP lineage and now markets unified endpoint management, cybersecurity, and data protection tools.
As of 10/10/2026, N-able recorded 7 security vulnerabilities in the last 90 days across 3 products, including 4 rated High or above and 3 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, N-central had the most security vulnerabilities in the N-able ecosystem, with 5 vulnerabilities—approximately 71.43% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-68624CVE-2025-68624CVE-2026-86218pre-authentication remote code executionDetailsCVE-2026-86206Access control filter bypass allows unauthorised access to APIsCVE-2026-86207Authentication bypass leads to unauthorised access to N-centralCVE-2026-15580PassPortal browser extension: vault token disclosure via unvalidated postMessage24 Results | Page 1 of 3
| SeverityCritical |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityCritical |
| SeverityCritical |
| SeverityHigh |