Veille CVE

Recherche « N-able N-central »

9 CVE

Critique 3 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « N-able N-central » ✕
  1. CVE-2026-86218 9.8 Critique Exploitée

    N-able N-central

    N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

  2. CVE-2026-86206 6.9 Moyenne

    N-able N-central

    A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

  3. CVE-2026-86207 7.7 Élevée

    N-able N-central

    An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

  4. CVE-2026-18577 8.1 Élevée Exploitée

    N-able N-central

    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

  5. CVE-2026-18556 7.4 Élevée Exploitée

    N-able N-central

    Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

  6. CVE-2025-9316 6.9 Moyenne

    N-able N-central

    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

  7. CVE-2025-11700 7.5 Élevée

    N-able N-central

    N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

  8. CVE-2025-11367 9.8 Critique

    N-able N-central

    The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization

  9. CVE-2025-11366 9.8 Critique

    N-able N-central

    N-central < 2025.4 is vulnerable to authentication bypass via path traversal