[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7x5SC9PLiHoqaFxpO7c7LWqjKULkMkYtTjHpFEQV8-E":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":94,"topProductsByCves":115,"seoMetadata":120,"meta":129},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":35},21006,"n-able",4,12,2,17,"2025-09-10","n",[16,21,27,31],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},115843,"n-central",14,9,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":24,"last_cve_update":26},115842,"automation_manager",0,1,"2024-05-02",{"id":28,"product_name":29,"version_count":25,"cve_count":25,"kev_count":24,"last_cve_update":30},115844,"passportal","2024-02-08",{"id":32,"product_name":33,"version_count":11,"cve_count":25,"kev_count":24,"last_cve_update":34},115845,"take_control","2023-09-11","N-able is a technology vendor with 4 tracked products and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[37,45,52,59,64,70,74,81,85,89],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":4,"epssScore":44},"CVE-2026-18556","Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.","2026-08-01",8.2,"v4.0","High",0.43884,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":42,"severity":43,"isKev":50,"epssScore":51},"CVE-2025-11700","N-central versions \u003C 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure","2025-11-12",8.4,false,0.31682,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":42,"severity":57,"isKev":4,"epssScore":58},"CVE-2026-86218","N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","2026-09-06",10,"Critical",0.15385,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":4,"epssScore":63},"CVE-2026-18577","An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1","2026-08-02",0.14622,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":42,"severity":57,"isKev":4,"epssScore":69},"CVE-2025-8876","Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.","2025-08-14",9.4,0.04078,{"cveId":71,"description":72,"publishedDate":67,"cvssScore":68,"cvssVersion":42,"severity":57,"isKev":4,"epssScore":73},"CVE-2025-8875","Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.",0.02322,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":57,"isKev":50,"epssScore":80},"CVE-2024-28200","The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2.\n\nThis vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.","2024-07-01",9.1,"v3.1",0.01946,{"cveId":82,"description":83,"publishedDate":48,"cvssScore":56,"cvssVersion":42,"severity":57,"isKev":50,"epssScore":84},"CVE-2025-11367","The N-central Software Probe \u003C 2025.4 is vulnerable to Remote Code Execution via deserialization",0.00627,{"cveId":86,"description":87,"publishedDate":48,"cvssScore":68,"cvssVersion":42,"severity":57,"isKev":50,"epssScore":88},"CVE-2025-11366","N-central \u003C 2025.4 is vulnerable to authentication bypass via path traversal",0.00604,{"cveId":90,"description":91,"publishedDate":30,"cvssScore":92,"cvssVersion":79,"severity":57,"isKev":50,"epssScore":93},"CVE-2023-47132","An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.",9.8,0.00551,[95,100,104,107,112],{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":42,"severity":57,"isKev":4,"epssScore":58,"cisaVulnName":96,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":99},"N-able N-central Static Code Injection Vulnerability","2026-09-08","N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":4,"epssScore":44,"cisaVulnName":101,"cisaDateAdded":102,"cisaShortDescription":103,"cisaRequiredAction":99},"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-08-04","N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.",{"cveId":60,"description":61,"publishedDate":62,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":4,"epssScore":63,"cisaVulnName":101,"cisaDateAdded":105,"cisaShortDescription":106,"cisaRequiredAction":99},"2026-08-03","N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.",{"cveId":71,"description":72,"publishedDate":67,"cvssScore":68,"cvssVersion":42,"severity":57,"isKev":4,"epssScore":73,"cisaVulnName":108,"cisaDateAdded":109,"cisaShortDescription":110,"cisaRequiredAction":111},"N-able N-Central Insecure Deserialization Vulnerability","2025-08-13","N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":42,"severity":57,"isKev":4,"epssScore":69,"cisaVulnName":113,"cisaDateAdded":109,"cisaShortDescription":114,"cisaRequiredAction":111},"N-able N-Central Command Injection Vulnerability","N-able N-Central contains a command injection vulnerability via improper sanitization of user input.",[116,117,118,119],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":24,"last_cve_update":26},{"id":28,"product_name":29,"version_count":25,"cve_count":25,"kev_count":24,"last_cve_update":30},{"id":32,"product_name":33,"version_count":11,"cve_count":25,"kev_count":24,"last_cve_update":34},{"title":121,"metaDescription":122,"keywords":123,"structuredData":124},"N-able - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for N-able covering 4 products with 12 tracked vulnerabilities including 3 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","N-able vulnerabilities, N-able security, N-able CVE, N-able threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, N-able KEV, N-able exploited vulnerabilities",{"@context":125,"@type":126,"name":127,"description":122,"url":128},"https:\u002F\u002Fschema.org","Organization","N-able","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fn-able",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":130,"apiVersion":131},"2026-11-14T05:09:14.584Z","3.0"]