N-central
N-able- Software type
- —
- Catalog vulnerabilities
- 18
Severity across 16 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 16 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, N-central has 5 security vulnerabilities published in the last 90 days. Of these, 4 are rated High or Critical. Notably, 3 of these vulnerabilities are listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of N-central and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86218pre-authentication remote code execution | Exploitation statusKEV | FixYes | Published09/06/2026 | SeverityCritical |
CVE-2026-86206Access control filter bypass allows unauthorised access to APIs | Exploitation statusNot known exploited | FixYes | Published09/05/2026 | SeverityMedium |
CVE-2026-86207Authentication bypass leads to unauthorised access to N-central | Exploitation statusNot known exploited | FixYes | Published09/05/2026 | SeverityHigh |
CVE-2026-18577Incomplete patch leads to administrative account takeover | Exploitation statusKEV | FixYes | Published08/02/2026 | SeverityHigh |
CVE-2026-18556Unauthenticated administrative account takeover | Exploitation statusKEV | FixYes | Published08/01/2026 | SeverityHigh |
CVE-2025-11367N-central windows software probe Remote Code Execution | Exploitation statusNot known exploited | FixYes | Published11/12/2025 | SeverityCritical |
CVE-2025-11366N-central Authentication bypass via path traversal | Exploitation statusNot known exploited | FixYes | Published11/12/2025 | SeverityCritical |
CVE-2025-11700N-central Multiple XXE Injection Vulnerabilities | Exploitation statusNot known exploited | FixYes | Published11/12/2025 | SeverityHigh |
CVE-2025-9316N-central unauthenticated sessionID generation | Exploitation statusNot known exploited | FixYes | Published11/12/2025 | SeverityMedium |
CVE-2025-10231N-central Incorrect Default Permissions could lead to Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published09/10/2025 | SeverityHigh |
CVE-2025-7051N-central Syslog Configuration Insecure Direct Object Reference | Exploitation statusNot known exploited | FixYes | Published08/21/2025 | SeverityHigh |
CVE-2025-8875Insecure Deserialization Vulnerability | Exploitation statusKEV | FixYes | Published08/14/2025 | SeverityCritical |
CVE-2025-8876Command Injection Vulnerability | Exploitation statusKEV | FixYes | Published08/14/2025 | SeverityCritical |
CVE-2024-8510N-central Path Traversal | Exploitation statusNot known exploited | FixYes | Published03/17/2025 | SeverityMedium |
CVE-2024-28200N-central Authentication Bypass | Exploitation statusNot known exploited | FixYes | Published07/01/2024 | SeverityCritical |
CVE-2024-5322N-central Authentication Bypass via Session Rebinding | Exploitation statusNot known exploited | FixYes | Published07/01/2024 | SeverityCritical |
CVE-2023-47132CVE-2023-47132 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2023-30297CVE-2023-30297 | Exploitation statusNot known exploited | FixNot confirmed | Published08/03/2023 | SeverityUnknown |