[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV4mZJBUwNWM-YQtiaTgu-_pZnuW81QejQ75Wt2ytLg8":3,"g5a-family:n-able\u002Fn-central":161,"g5a-ex:n-able\u002Fn-central@*":162},{"success":4,"data":5},true,{"product":6,"versions":45,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":118,"seoMetadata":139,"meta":158},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":44},"n-able","n-central",14,9,2,"2025-09-10",[14,18,20,22,24,26,28,30,32,34,36,38,40,42],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2023.4",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"2023.6",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2023.7",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"2024.1",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"2024.2",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"2024.3",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"2024.4",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"2024.6",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"2025.1",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"2025.2",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"2025.2.1",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"2025.3",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"2025.3.1",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"2025.4","N-central by N-able is a technology product with 14 tracked versions and 9 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[46,47,48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},[61,69,75,82,87,93,97,104,108,112],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":4,"epssScore":68},"CVE-2026-18556","Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.","2026-08-01",8.2,"v4.0","High",0.43884,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":74},"CVE-2025-11700","N-central versions \u003C 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure","2025-11-12",8.4,0.31682,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":66,"severity":80,"isKev":4,"epssScore":81},"CVE-2026-86218","N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","2026-09-06",10,"Critical",0.15385,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":4,"epssScore":86},"CVE-2026-18577","An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1","2026-08-02",0.14622,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":66,"severity":80,"isKev":4,"epssScore":92},"CVE-2025-8876","Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.","2025-08-14",9.4,0.04078,{"cveId":94,"description":95,"publishedDate":90,"cvssScore":91,"cvssVersion":66,"severity":80,"isKev":4,"epssScore":96},"CVE-2025-8875","Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.",0.02322,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":102,"severity":80,"isKev":17,"epssScore":103},"CVE-2024-28200","The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2.\n\nThis vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.","2024-07-01",9.1,"v3.1",0.01946,{"cveId":105,"description":106,"publishedDate":72,"cvssScore":79,"cvssVersion":66,"severity":80,"isKev":17,"epssScore":107},"CVE-2025-11367","The N-central Software Probe \u003C 2025.4 is vulnerable to Remote Code Execution via deserialization",0.00627,{"cveId":109,"description":110,"publishedDate":72,"cvssScore":91,"cvssVersion":66,"severity":80,"isKev":17,"epssScore":111},"CVE-2025-11366","N-central \u003C 2025.4 is vulnerable to authentication bypass via path traversal",0.00604,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":102,"severity":80,"isKev":17,"epssScore":117},"CVE-2023-47132","An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.","2024-02-08",9.8,0.00551,[119,124,128,131,136],{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"severity":80,"isKev":4,"epssScore":81,"cisaVulnName":120,"cisaDateAdded":121,"cisaShortDescription":122,"cisaRequiredAction":123},"N-able N-central Static Code Injection Vulnerability","2026-09-08","N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"severity":67,"isKev":4,"epssScore":68,"cisaVulnName":125,"cisaDateAdded":126,"cisaShortDescription":127,"cisaRequiredAction":123},"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-08-04","N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.",{"cveId":83,"description":84,"publishedDate":85,"cvssScore":65,"severity":67,"isKev":4,"epssScore":86,"cisaVulnName":125,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":123},"2026-08-03","N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.",{"cveId":94,"description":95,"publishedDate":90,"cvssScore":91,"severity":80,"isKev":4,"epssScore":96,"cisaVulnName":132,"cisaDateAdded":133,"cisaShortDescription":134,"cisaRequiredAction":135},"N-able N-Central Insecure Deserialization Vulnerability","2025-08-13","N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"severity":80,"isKev":4,"epssScore":92,"cisaVulnName":137,"cisaDateAdded":133,"cisaShortDescription":138,"cisaRequiredAction":135},"N-able N-Central Command Injection Vulnerability","N-able N-Central contains a command injection vulnerability via improper sanitization of user input.",{"title":140,"metaDescription":141,"keywords":142,"structuredData":143},"N-central by N-able - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for N-central by N-able covering 14 versions with 9 tracked vulnerabilities including 3 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","N-central vulnerabilities, N-central security, N-central CVE, N-able N-central, N-central threat intelligence, N-able security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, N-central KEV, N-central exploited vulnerabilities",{"@context":144,"@type":145,"name":146,"description":141,"url":147,"manufacturer":148,"applicationCategory":152,"softwareVersion":153,"mainEntity":154},"https:\u002F\u002Fschema.org","SoftwareApplication","N-central","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fn-able\u002Fn-central",{"@type":149,"name":150,"url":151},"Organization","N-able","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fn-able","Security Software","14 versions tracked",{"@type":155,"name":156,"description":157,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","N-central Security Vulnerabilities","Security vulnerabilities affecting N-central by N-able",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":159,"apiVersion":160},"2026-11-14T05:09:16.836Z","3.0",[],{"rows":163,"total":191,"capped":17,"failed":16},[164,173,178,182,187],{"cveId":76,"name":120,"severity":80,"cvss":79,"added":121,"epss":81,"published":165,"ranges":166,"checked":4,"hits":172,"covers":17},"2026-09-06T03:17:17.373",[167,168,169,170,171],"before 2026.3","2026.3","2026.3-hotfix1","2026.3-hotfix2","2026.3-hotfix3",[],{"cveId":62,"name":125,"severity":67,"cvss":65,"added":126,"epss":68,"published":174,"ranges":175,"checked":4,"hits":177,"covers":17},"2026-08-01T20:16:37.157",[176],"up to 2026.1",[],{"cveId":83,"name":125,"severity":67,"cvss":65,"added":129,"epss":86,"published":179,"ranges":180,"checked":4,"hits":181,"covers":17},"2026-08-02T23:16:26.21",[167,168],[],{"cveId":94,"name":132,"severity":80,"cvss":91,"added":133,"epss":96,"published":183,"ranges":184,"checked":4,"hits":186,"covers":17},"2025-08-14T15:15:43.02",[185],"before 2025.3.1",[],{"cveId":88,"name":137,"severity":80,"cvss":91,"added":133,"epss":92,"published":188,"ranges":189,"checked":4,"hits":190,"covers":17},"2025-08-14T15:15:43.17",[185],[],5]