N-able N-Central: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in N-able N-Central ausnutzen, um vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Administratorrechte zu erlangen oder beliebigen Code und…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-44408 linked CVEs
Open advisory with all CVEs
More on N-Central
Other advisories
- CriticalCVE-2026-125880N-able N-Central: Mehrere Schwachstellen
- HighCVE-2026-125880N-able N-central: Skript-Injection über HTTP-Header
- HighCVE-2026-125880N-able N-central: Skript-Injection über HTTP-Header
- HighCVE-2026-125880Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS).
- HighCVE-2026-125882N-able N-central: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-125882N-able N-central: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-125882Relative path traversal vulnerability in N-able N-central allows Path Traversal.
- CriticalCVE-2026-125881N-able N-central: Server-Side-Request-Forgery (SSRF)
Other news entries
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM AccessNewsThe Hacker News
- Hackers Target N-central Zero-Days as N-able Rushes PatchesNewsSecurityWeek
- N-able Takes N-central Platform Offline After Discovery of 33 FlawsNewsDark Reading
- N-able releases security hotfixes for zero-day vulnerabilitiesNewsBleepingComputer
- NCSC-2026-0478 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-centralNewsNCSC-NL
- N-able N-central gets emergency fix two days after 33 exploits publishedNewsCSO Online
- Critical vulnerabilities in N-able N-central prompt hosted shutdownNewsRapid7
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4440
ID