CVE-2026-18577 Incomplete patch leads to administrative account takeover

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

EUVD-2025-131914

N-central versions 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure...