Advisories · Technology
N-able N-central.
Every CVE that names N-able N-central among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
pre-authentication remote code execution
- N-able N-central
- Code injection
- CVSS 6.9 Medium
Access control filter bypass allows unauthorised access to APIs
- N-able N-central
- CWE-791
- CVSS 7.7 High
Authentication bypass leads to unauthorised access to N-central
- N-able N-central
- CWE-305
- CVSS 8.2 HighCritical · KEV, CVSS 7+ and EPSSKEV
Incomplete patch leads to administrative account takeover
- N-able N-central
- Authentication bypass
- CVSS 8.2 HighCritical · KEVKEV
Unauthenticated administrative account takeover
- N-able N-central
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
N-central windows software probe Remote Code Execution
- N-able N-central
- Insecure deserialization
- CVSS 9.4 CriticalCritical · CVSS 9+
N-central Authentication bypass via path traversal
- N-able N-central
- Path traversal
- CVSS 8.4 HighCritical · CVSS 7+ and EPSS
N-central Multiple XXE Injection Vulnerabilities
- N-able N-central
- XML external entities (XXE)
- CVSS 6.9 Medium
N-central unauthenticated sessionID generation
- N-able N-central
- CWE-1284
- CVSS 7.0 High
N-central Incorrect Default Permissions could lead to Privilege Escalation
- N-able N-central
- Broken access control
- CVSS 8.3 High
N-central Syslog Configuration Insecure Direct Object Reference
- N-able N-central
- Broken access control
- CVSS 9.4 CriticalCritical · KEV, CVSS 9+KEV
Insecure Deserialization Vulnerability
- N-able N-central
- Insecure deserialization
- CVSS 9.4 CriticalCritical · KEV, CVSS 9+KEV
Command Injection Vulnerability
- N-able N-central
- CWE-20
- CVSS 5.3 Medium
N-central Path Traversal
- N-able N-central
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
N-central Authentication Bypass
- N-able N-central
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
N-central Authentication Bypass via Session Rebinding
- N-able N-central
- Authentication bypass