CVE Program partner

N-able

N-able

API
CVEs, 365 days1018 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationN-able
RoleCNA
TypeVendor
Reports tomitre
ScopeN-able branded products and technologies only.
Advisorieshttps://me.n-able.com/s/global-search/%40uri#t=All&sort=relevancy&f:@repositorytype=[Security_Advisory]

Latest CVEs · RSS

  • CVE-2026-86218 2026-09-06 · CVSS 10.0
    N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
  • CVE-2026-86206 2026-09-05 · CVSS 6.9
    A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.
  • CVE-2026-86207 2026-09-05 · CVSS 7.7
    An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs
  • CVE-2026-15580 2026-08-21 · CVSS 6.9
    vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser ex
  • CVE-2026-18577 2026-08-02 · CVSS 8.2
    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
  • CVE-2026-18556 2026-08-01 · CVSS 8.2
    Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through
  • CVE-2025-11367 2025-11-12 · CVSS 10.0
    The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
  • CVE-2025-11366 2025-11-12 · CVSS 9.4
    N-central < 2025.4 is vulnerable to authentication bypass via path traversal
  • CVE-2025-11700 2025-11-12 · CVSS 8.4
    N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
  • CVE-2025-9316 2025-11-12 · CVSS 6.9
    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.
  • CVE-2025-10231 2025-09-10 · CVSS 7.0
    An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to
  • CVE-2025-7051 2025-08-21 · CVSS 8.3
    On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerabili
  • CVE-2025-8875 2025-08-14 · CVSS 9.4
    Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
  • CVE-2025-8876 2025-08-14 · CVSS 9.4
    Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.
  • CVE-2024-8510 2025-03-17 · CVSS 5.3
    N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerabi
  • CVE-2024-5445 2024-08-08 · CVSS 3.8
    Ecosystem Agent version 4 < 4.1.5.2597 and Ecosystem Agent version 5 < 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious
  • CVE-2024-28200 2024-07-01 · CVSS 9.1
    The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 202
  • CVE-2024-5322 2024-07-01 · CVSS 9.1
    The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vul

All CVE Program partners