Product by N-able
N-able N-central
18 known vulnerabilities in N-able N-central (N-able), 5 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-86218 | pre-authentication remote code execution In CISA KEV | 9.8 | |
| Critical | CVE-2026-18577 | Incomplete patch leads to administrative account takeover In CISA KEV | 8.1 | |
| Critical | CVE-2026-18556 | Unauthenticated administrative account takeover In CISA KEV | 7.4 | |
| Critical | CVE-2025-8876 | Command Injection Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-8875 | Insecure Deserialization Vulnerability In CISA KEV | 7.8 | |
| High | CVE-2025-11700 | N-central Multiple XXE Injection Vulnerabilities | 7.5 | |
| Medium | CVE-2025-9316 | N-central unauthenticated sessionID generation | — | |
| High | CVE-2026-86207 | Authentication bypass leads to unauthorised access to N-central | — | |
| Critical | CVE-2024-28200 | N-central Authentication Bypass | 9.1 | |
| Medium | CVE-2026-86206 | Access control filter bypass allows unauthorised access to APIs | — | |
| Critical | CVE-2025-11367 | N-central windows software probe Remote Code Execution | 9.8 | |
| Critical | CVE-2025-11366 | N-central Authentication bypass via path traversal | 9.8 | |
| Critical | CVE-2023-47132 | N-able N-central: security vulnerability | 9.8 | |
| Critical | CVE-2024-5322 | N-central Authentication Bypass via Session Rebinding | 9.1 | |
| High | CVE-2025-7051 | N-central Syslog Configuration Insecure Direct Object Reference | 8.3 | |
| High | CVE-2025-10231 | N-central Incorrect Default Permissions could lead to Privilege Escalation | 7.0 | |
| Medium | CVE-2024-8510 | N-central Path Traversal | 5.3 | |
| High | CVE-2023-30297 | N-able N-central: Code Execution | 7.0 |
News
- N-able N-central Pre-Auth RCE Flaw Exploited in the Wildthehackernews,
- Back-to-back N-able bugs send admins on a patching spreecsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
- NCSC-2026-0275 [1.01] [M/H] Kwetsbaarheden verholpen in N-able N-centralncsc-nl,
- CISA Adds Five CVEs to Known Exploited Vulnerabilities Catalogsans-newsbites-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,