- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/16/2026, N-central recorded 5 security vulnerabilities in the last 90 days, of which 4 are rated High or Critical. Notably, 3 of these vulnerabilities are actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of N-central and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86218pre-authentication remote code executionCVE-2026-86206Access control filter bypass allows unauthorised access to APIsCVE-2026-86207Authentication bypass leads to unauthorised access to N-centralCVE-2026-18577Incomplete patch leads to administrative account takeoverCVE-2026-18556Unauthenticated administrative account takeover| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86218pre-authentication remote code execution | Exploitation statusKEV | FixYes | Published09/06/2026 | SeverityCritical |
CVE-2026-86206Access control filter bypass allows unauthorised access to APIs | Exploitation statusNot exploited | FixYes | Published09/05/2026 | SeverityMedium |
CVE-2026-86207Authentication bypass leads to unauthorised access to N-central | Exploitation statusNot exploited | FixYes | Published09/05/2026 | SeverityHigh |
CVE-2026-18577Incomplete patch leads to administrative account takeover | Exploitation statusKEV | FixYes | Published08/02/2026 | SeverityHigh |
CVE-2026-18556Unauthenticated administrative account takeover | Exploitation statusKEV | FixYes | Published08/01/2026 | SeverityHigh |
CVE-2025-11367N-central windows software probe Remote Code Execution | Exploitation statusNot exploited | FixYes | Published11/12/2025 | SeverityCritical |
CVE-2025-11366N-central Authentication bypass via path traversal | Exploitation statusNot exploited | FixYes | Published11/12/2025 | SeverityCritical |
CVE-2025-11700N-central Multiple XXE Injection Vulnerabilities | Exploitation statusNot exploited | FixYes | Published11/12/2025 | SeverityHigh |
CVE-2025-9316N-central unauthenticated sessionID generation | Exploitation statusNot exploited | FixYes | Published11/12/2025 | SeverityMedium |
CVE-2025-10231N-central Incorrect Default Permissions could lead to Privilege Escalation | Exploitation statusNot exploited | FixYes | Published09/10/2025 | SeverityHigh |
18 Results | Page 1 of 2