EUVD-2025-131913

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

EUVD-2025-131915

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

EUVD-2025-131914

N-central versions 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure...

CVE-2025-9316

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

CVE-2025-11366

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11367

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11367

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-11366

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-11367 N-central windows software probe Remote Code Execution

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11367

The CVE-2025-11367 entry affects the N-central Software Probe (windows) prior to version 2025.4. The vulnerability relies on deserialization, allowing remote code execution with network access and no authentication. Impact is described as full compromise of affected systems (high confidentiality,...

CVE-2025-11367 N-central windows software probe Remote Code Execution

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11366 N-central Authentication bypass via path traversal

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11366

Summary: CVE-2025-11366 affects N-able N-central, versions prior to 2025.4, with an authentication bypass via path traversal. The issue enables bypassing login controls by manipulating file paths, exposing high-privilege access. Impact: high confidentiality, integrity, and availability risks may ...

CVE-2025-11366 N-central Authentication bypass via path traversal

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11700

N-able N-Central is affected by CVE-2025-11700. Versions earlier than 2025.4 are vulnerable to an XML External Entity (XXE) injection, enabling information disclosure. Remediation: upgrade to version 2025.4 or later.

CVE-2025-11700 N-central Multiple XXE Injection Vulnerabilities

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-9316 N-central unauthenticated sessionID generation

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

CVE-2025-9316

CVE-2025-9316 affects N-able N-Central versions before 2025.4, enabling unauthenticated sessionID generation and potential session hijack. A nuclei template and advisories describe it as an authentication bypass; mitigations cite updating to 2025.4 or later. Some sources also reference combining ...