CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

201 matches found

N-able N-central < 2024.2 - Authentication Bypass Detection

N-central server versions prior to 2024.2 contain an authentication bypass in the user interface, letting attackers access restricted areas without proper credentials, exploit requires no specific conditions. id: CVE-2024-28200 info: name: N-able N-central 2024.2 - Authentication Bypass Detection...

9.8CVSS5.8AI score0.49055EPSS

Exploits0References4

Nuclei•added 2026/02/04 7:0 a.m.•8 views

N-central - Authentication Bypass

N-central 3 matchers-condition: and matchers: - type: word words: - "SessionID" - "sessionHelloResponse" condition: and - type: status...

6.9CVSS7AI score0.71424EPSS

Exploits2References2

Nuclei•added 2026/02/04 7:0 a.m.•4 views

N-central - XML External Entities Injection

N-central versions %xxe; rand http: - raw: - | POST /dms/services/ServerUI HTTP/2 Host: Hostname Content-Type: text/xml Soapaction: ""...

8.4CVSS7.1AI score0.51775EPSS

Exploits1References2

GithubExploit•added 2026/01/29 8:40 a.m.•118 views

Exploit for Improper Restriction of XML External Entity Reference in N-Able N-Central

No d...

8.4CVSS5.9AI score0.71424EPSS

Exploits2

Rapid7 Blog•added 2025/12/19 9:2 p.m.•9 views

Metasploit Wrap-Up 12/19/2025

React2Shell Payload Improvements Last week Metasploit released an exploit for the React2Shell vulnerability, and this week we have made a couple of improvements to the payloads that it uses. The first improvement affects all Metasploit modules. When an exploit is used, an initial payload is...

8.4CVSS8.2AI score0.51775EPSS

Exploits1

VulnCheck KEV•added 2025/12/15 12:0 a.m.•0 views

VulnCheck KEV: CVE-2025-9316

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

6.9CVSS5.8AI score0.71424EPSS

In wildExploits2References24

VulnCheck KEV•added 2025/12/15 12:0 a.m.•2 views

VulnCheck KEV: CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

8.4CVSS5.8AI score0.51775EPSS

In wildExploits1References2

Metasploit•added 2025/12/12 6:56 p.m.•310 views

N-able N-Central Authentication Bypass and XXE Scanner

This module scans for vulnerable N-able N-Central instances affected by CVE-2025-9316 Unauthenticated Session Bypass and CVE-2025-11700 XXE. The module attempts to exploit CVE-2025-9316 by sending a sessionHello SOAP request to the ServerMMS endpoint with various appliance IDs to obtain an...

6.9CVSS7.5AI score0.71424EPSS

Exploits2