Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (26 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-125880 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS). This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-125883 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-91000 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation. This issue affects N-central: before 2026.4.1. | ||||
| CVE-2026-125958 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1. | ||||
| CVE-2026-125878 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection. This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-125879 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Incorrect privilege assignment vulnerability in N-able N-central allows Privilege Escalation. This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-125881 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request Forgery. This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-125882 | 1 N-able | 1 N-central | 2026-11-13 | N/A |
| Relative path traversal vulnerability in N-able N-central allows Path Traversal. This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-86218 | 1 N-able | 1 N-central | 2026-09-08 | 9.8 Critical |
| N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. | ||||
| CVE-2026-86207 | 1 N-able | 1 N-central | 2026-09-08 | N/A |
| An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs | ||||
| CVE-2026-86206 | 1 N-able | 1 N-central | 2026-09-08 | N/A |
| A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 | ||||
| CVE-2026-18556 | 1 N-able | 1 N-central | 2026-08-05 | 7.4 High |
| Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1. | ||||
| CVE-2026-18577 | 1 N-able | 1 N-central | 2026-08-04 | 8.1 High |
| An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 | ||||
| CVE-2025-9316 | 1 N-able | 1 N-central | 2026-04-15 | N/A |
| N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4. | ||||
| CVE-2025-10231 | 2 Microsoft, N-able | 2 Windows, N-central | 2026-02-26 | 7 High |
| An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions. | ||||
| CVE-2025-7051 | 1 N-able | 1 N-central | 2026-02-26 | 8.3 High |
| On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2. | ||||
| CVE-2025-11367 | 1 N-able | 1 N-central | 2026-02-26 | 9.8 Critical |
| The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization | ||||
| CVE-2025-11700 | 1 N-able | 1 N-central | 2025-12-15 | 7.5 High |
| N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure | ||||
| CVE-2025-11366 | 1 N-able | 1 N-central | 2025-11-14 | 9.8 Critical |
| N-central < 2025.4 is vulnerable to authentication bypass via path traversal | ||||
| CVE-2025-8875 | 1 N-able | 1 N-central | 2025-10-27 | 7.8 High |
| Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. | ||||