220 matches found
CVE-2025-11367
The CVE-2025-11367 entry affects the N-central Software Probe (windows) prior to version 2025.4. The vulnerability relies on deserialization, allowing remote code execution with network access and no authentication. Impact is described as full compromise of affected systems (high confidentiality,...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11366 N-central Authentication bypass via path traversal
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11366 N-central Authentication bypass via path traversal
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11366
Summary: CVE-2025-11366 affects N-able N-central, versions prior to 2025.4, with an authentication bypass via path traversal. The issue enables bypassing login controls by manipulating file paths, exposing high-privilege access. Impact: high confidentiality, integrity, and availability risks may ...
CVE-2025-11700 N-central Multiple XXE Injection Vulnerabilities
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-11700
N-able N-Central is affected by CVE-2025-11700. Versions earlier than 2025.4 are vulnerable to an XML External Entity (XXE) injection, enabling information disclosure. Remediation: upgrade to version 2025.4 or later.
CVE-2025-9316 N-central unauthenticated sessionID generation
N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...
CVE-2025-9316 N-central unauthenticated sessionID generation
N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...
CVE-2025-9316
CVE-2025-9316 affects N-able N-Central versions before 2025.4, enabling unauthenticated sessionID generation and potential session hijack. A nuclei template and advisories describe it as an authentication bypass; mitigations cite updating to 2025.4 or later. Some sources also reference combining ...
PT-2025-46665
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions before 2025.4 can generate sessionIDs for users without authentication. This allows unauthenticated users to potentially gain access to the system. Recommendations Update...
PT-2025-46662
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central is susceptible to authentication bypass through a path traversal technique. This allows unauthorized access by exploiting a flaw in how the software handles file paths. Recommendations...
PT-2025-46664
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions prior to 2025.4 are susceptible to an XML External Entities injection that could lead to information disclosure. This issue allows for the potential exposure of sensitive data...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4 that stems from generating session IDs f...
PT-2025-46663
Name of the Vulnerable Software and Affected Versions N-central Software Probe versions prior to 2025.4 Description The N-central Software Probe is susceptible to Remote Code Execution through deserialization. No authentication is required for exploitation. Recommendations Update to a version of...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4 that stems from a deserialization issue...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4, which originates from XML external enti...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4 that stems from path traversal leading t...
