CVE-2025-11700 PoC — N-able N-central 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11700.yaml

Associated Vulnerability

Title:N-able N-central 安全漏洞 (CVE-2025-11700)
Description:N-able N-central是加拿大N-able公司的一个 RMM 平台。为成熟的 MSP 和 IT 专业人员提供了大规模管理、自动化和编排功能。 N-able N-central 2025.4之前版本存在安全漏洞，该漏洞源于XML外部实体注入，可能导致信息泄露。

Description

N-central versions < 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure.

File Snapshot


 id: CVE-2025-11700

info:
  name: N-central - XML External Entities Injection
  author: DhiyaneshDK,

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!