<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: n-able-n-central</title><description>Every new CVE for n-able-n-central.</description><link>https://agentprime.io/</link><item><title>CVE-2026-86218: pre-authentication remote code execution</title><link>https://agentprime.io/advisories/CVE-2026-86218/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86218/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 8 Sept 2026: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 06 Sep 2026 02:15:28 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2026-86206: Access control filter bypass allows unauthorised access to APIs</title><link>https://agentprime.io/advisories/CVE-2026-86206/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86206/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 05 Sep 2026 19:17:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86207: Authentication bypass leads to unauthorised access to N-central</title><link>https://agentprime.io/advisories/CVE-2026-86207/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86207/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 05 Sep 2026 19:12:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18577: Incomplete patch leads to administrative account takeover</title><link>https://agentprime.io/advisories/CVE-2026-18577/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18577/</guid><description>CVSS 8.2 (High). Critical: In CISA’s KEV catalogue since 3 Aug 2026: it is known to be exploited. CVSS score 8.2 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 02 Aug 2026 22:06:18 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2026-18556: Unauthenticated administrative account takeover</title><link>https://agentprime.io/advisories/CVE-2026-18556/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18556/</guid><description>CVSS 8.2 (High). Critical: In CISA’s KEV catalogue since 4 Aug 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 01 Aug 2026 19:59:30 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-11367: N-central windows software probe Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2025-11367/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11367/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Nov 2025 15:34:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-11366: N-central Authentication bypass via path traversal</title><link>https://agentprime.io/advisories/CVE-2025-11366/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11366/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Nov 2025 15:33:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-11700: N-central Multiple XXE Injection Vulnerabilities</title><link>https://agentprime.io/advisories/CVE-2025-11700/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11700/</guid><description>CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.32 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Nov 2025 15:30:38 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-9316: N-central unauthenticated sessionID generation</title><link>https://agentprime.io/advisories/CVE-2025-9316/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9316/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Nov 2025 15:27:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10231: N-central Incorrect Default Permissions could lead to Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2025-10231/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10231/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Sep 2025 13:34:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-7051: N-central Syslog Configuration Insecure Direct Object Reference</title><link>https://agentprime.io/advisories/CVE-2025-7051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7051/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 21 Aug 2025 17:34:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-8875: Insecure Deserialization Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-8875/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8875/</guid><description>CVSS 9.4 (Critical). Critical: In CISA’s KEV catalogue since 13 Aug 2025: it is known to be exploited. CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Aug 2025 14:56:11 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-8876: Command Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-8876/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8876/</guid><description>CVSS 9.4 (Critical). Critical: In CISA’s KEV catalogue since 13 Aug 2025: it is known to be exploited. CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Aug 2025 14:53:55 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-8510: N-central Path Traversal</title><link>https://agentprime.io/advisories/CVE-2024-8510/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-8510/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Mar 2025 19:01:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28200: N-central Authentication Bypass</title><link>https://agentprime.io/advisories/CVE-2024-28200/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28200/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jul 2024 20:49:38 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-5322: N-central Authentication Bypass via Session Rebinding</title><link>https://agentprime.io/advisories/CVE-2024-5322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5322/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jul 2024 20:46:40 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>