Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

N-central — Vulnerabilities & Security Advisories 24

All 24 CVE vulnerabilities found in N-central, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the N-central network management platform, specifically focusing on vendor-issued advisories and common vulnerability classifications. The collection encompasses a broad spectrum of flaws including remote code execution, privilege escalation, and cross-site scripting issues documented from the product's initial public release through the most recent security bulletins. Visitors can utilize this resource to track ongoing vendor advisories for timely patching, analyze the prevalence and impact of specific weakness classes across the software suite, or review the complete historical vulnerability record of the N-central product line. By centralizing these disparate security reports, the page provides a comprehensive view of the platform's security posture without requiring users to navigate multiple external databases or vendor portals. This consolidated data supports security teams in performing accurate risk assessments and maintaining robust defense strategies against evolving threats targeting network infrastructure management tools. The information presented relies solely on publicly disclosed details and official vendor communications to ensure accuracy and relevance for system administrators and security analysts monitoring the N-central ecosystem.

Vendor: N-able

CVE ID Title CVSS Severity Published
CVE-2026-125880 Stored XSS via MMS3 patch metadata (admin context) CWE-644 8.3 High 2026-11-10
CVE-2026-125882 RCE via file repository upload path traversal CWE-23 8.6 High 2026-11-10
CVE-2026-125881 Schema-hint SSRF via service import schema validation CWE-918 9.3 Critical 2026-11-10
CVE-2026-125879 Local privilege escalation to root via nable-writable syslog-ng config CWE-266 8.6 High 2026-11-10
CVE-2026-125878 Multiple OGNL Injection vulnerabilities CWE-79 8.7 High 2026-11-10
CVE-2026-125958 Root RCE via unsigned NSP upgrade package upload CWE-494 7.5 High 2026-11-10
CVE-2026-91000 Insecure IPC Channels lead to local privilege escalation CWE-306 8.4 High 2026-11-10
CVE-2026-125883 Multiple XXE Vulnerabilities CWE-611 9.3 Critical 2026-11-10
CVE-2026-86218 pre-authentication remote code execution CWE-96 10.0 Critical 2026-09-06
CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs CWE-791 6.9 Medium 2026-09-05
CVE-2026-86207 Authentication bypass leads to unauthorised access to N-central CWE-305 7.7 High 2026-09-05
CVE-2026-18577 Incomplete patch leads to administrative account takeover CWE-288 8.2 High 2026-08-02
CVE-2026-18556 Unauthenticated administrative account takeover CWE-288 8.2 High 2026-08-01
CVE-2025-11367 N-central windows software probe Remote Code Execution CWE-502 9.8 - 2025-11-12
CVE-2025-11366 N-central Authentication bypass via path traversal CWE-22 9.8 - 2025-11-12
CVE-2025-11700 N-central Multiple XXE Injection Vulnerabilities CWE-611 7.5 - 2025-11-12
CVE-2025-9316 N-central unauthenticated sessionID generation CWE-1284 6.5 - 2025-11-12
CVE-2025-10231 N-central Incorrect Default Permissions could lead to Privilege Escalation CWE-276 7.0 High 2025-09-10
CVE-2025-7051 N-central Syslog Configuration Insecure Direct Object Reference CWE-284 8.3 High 2025-08-21
CVE-2025-8875 Insecure Deserialization Vulnerability CWE-502 7.8AI High AI 2025-08-14
CVE-2025-8876 Command Injection Vulnerability CWE-20 9.8AI Critical AI 2025-08-14
CVE-2024-8510 N-central Path Traversal CWE-22 5.3 Medium 2025-03-17
CVE-2024-28200 N-central Authentication Bypass CWE-288 9.1 Critical 2024-07-01
CVE-2024-5322 N-central Authentication Bypass via Session Rebinding CWE-288 9.1 Critical 2024-07-01

All 24 known CVE vulnerabilities affecting N-central with full Chinese analysis, references, and POCs where available.