EUVD-2025-131915

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

EUVD-2025-131912

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

EUVD-2025-131927

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

EUVD-2025-131913

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

EUVD-2025-131914

N-central versions 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure...

CVE-2025-9316

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-11367

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11366

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11366

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11367

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-11367 N-central windows software probe Remote Code Execution

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11367 N-central windows software probe Remote Code Execution

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11367

The CVE-2025-11367 entry affects the N-central Software Probe (windows) prior to version 2025.4. The vulnerability relies on deserialization, allowing remote code execution with network access and no authentication. Impact is described as full compromise of affected systems (high confidentiality,...

CVE-2025-11366 N-central Authentication bypass via path traversal

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11366 N-central Authentication bypass via path traversal

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11366

Summary: CVE-2025-11366 affects N-able N-central, versions prior to 2025.4, with an authentication bypass via path traversal. The issue enables bypassing login controls by manipulating file paths, exposing high-privilege access. Impact: high confidentiality, integrity, and availability risks may ...

CVE-2025-11700

N-able N-Central is affected by CVE-2025-11700. Versions earlier than 2025.4 are vulnerable to an XML External Entity (XXE) injection, enabling information disclosure. Remediation: upgrade to version 2025.4 or later.