https://vulnogram.org/ Most recent CVEs assigned by N-able (n-able). https://vulnogram.org/seaview/icons/n-able.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-86218 https://vulnogram.org/CVE-2026-86218 N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. Critical Known Exploited Network Exploitable Sun, 06 Sep 2026 02:15:28 GMT https://vulnogram.org/CVE-2026-86206 https://vulnogram.org/CVE-2026-86206 A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 Medium Network Exploitable Sat, 05 Sep 2026 19:17:50 GMT https://vulnogram.org/CVE-2026-86207 https://vulnogram.org/CVE-2026-86207 An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs High Sat, 05 Sep 2026 19:12:06 GMT https://vulnogram.org/CVE-2026-15580 https://vulnogram.org/CVE-2026-15580 vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6. Medium Network Exploitable Fri, 21 Aug 2026 14:00:10 GMT https://vulnogram.org/CVE-2026-18577 https://vulnogram.org/CVE-2026-18577 An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 High Known Exploited Network Exploitable Sun, 02 Aug 2026 22:06:18 GMT https://vulnogram.org/CVE-2026-18556 https://vulnogram.org/CVE-2026-18556 Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1. High Known Exploited Network Exploitable Sat, 01 Aug 2026 19:59:30 GMT https://vulnogram.org/CVE-2025-11367 https://vulnogram.org/CVE-2025-11367 The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization Critical Network Exploitable Wed, 12 Nov 2025 15:34:54 GMT https://vulnogram.org/CVE-2025-11366 https://vulnogram.org/CVE-2025-11366 N-central < 2025.4 is vulnerable to authentication bypass via path traversal Critical Wed, 12 Nov 2025 15:33:25 GMT https://vulnogram.org/CVE-2025-11700 https://vulnogram.org/CVE-2025-11700 N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure High Wed, 12 Nov 2025 15:30:38 GMT https://vulnogram.org/CVE-2025-9316 https://vulnogram.org/CVE-2025-9316 N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4. Medium Network Exploitable Wed, 12 Nov 2025 15:27:25 GMT https://vulnogram.org/CVE-2025-10231 https://vulnogram.org/CVE-2025-10231 An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions. High Wed, 10 Sep 2025 13:34:41 GMT https://vulnogram.org/CVE-2025-7051 https://vulnogram.org/CVE-2025-7051 On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2. High Thu, 21 Aug 2025 17:34:31 GMT https://vulnogram.org/CVE-2025-8875 https://vulnogram.org/CVE-2025-8875 Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1. Critical Known Exploited Thu, 14 Aug 2025 14:56:11 GMT https://vulnogram.org/CVE-2025-8876 https://vulnogram.org/CVE-2025-8876 Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1. Critical Known Exploited Thu, 14 Aug 2025 14:53:55 GMT https://vulnogram.org/CVE-2024-8510 https://vulnogram.org/CVE-2024-8510 N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6. Medium Network Exploitable Mon, 17 Mar 2025 19:01:36 GMT https://vulnogram.org/CVE-2024-5445 https://vulnogram.org/CVE-2024-5445 Ecosystem Agent version 4 < 4.1.5.2597 and Ecosystem Agent version 5 < 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent and N-able se… Low Thu, 08 Aug 2024 22:04:11 GMT https://vulnogram.org/CVE-2024-28200 https://vulnogram.org/CVE-2024-28200 The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N… Critical Network Exploitable Mon, 01 Jul 2024 20:49:38 GMT https://vulnogram.org/CVE-2024-5322 https://vulnogram.org/CVE-2024-5322 The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3. Critical Network Exploitable Mon, 01 Jul 2024 20:46:40 GMT