N-able N-central vulnerabilities
16 published CVEs name N-able N-central among the affected products; CISA lists 5 of them as exploited in the wild.
- Published CVEs
- 16
- Last 12 months
- 9
- Critical
- 7
- Known exploited
- 5
Critical 7High 6Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20259
- 20265
Known exploitedNewest addition to KEV first
- CVE-2026-86218
pre-authentication remote code execution
N-able · N-central
ExploitedCritical10.0 - CVE-2026-18556
Unauthenticated administrative account takeover
N-able · N-central
ExploitedHigh8.2 - CVE-2026-18577
Incomplete patch leads to administrative account takeover
N-able · N-central
ExploitedHigh8.2 - CVE-2025-8875
Insecure Deserialization Vulnerability
N-able · N-central
ExploitedCritical9.4 - CVE-2025-8876
Command Injection Vulnerability
N-able · N-central
ExploitedCritical9.4
Newest CVEs
- CVE-2026-86218
pre-authentication remote code execution
N-able · N-central
ExploitedCritical10.0 - CVE-2026-86206
Access control filter bypass allows unauthorised access to APIs
N-able · N-central
Medium6.9 - CVE-2026-86207
Authentication bypass leads to unauthorised access to N-central
N-able · N-central
High7.7 - CVE-2026-18577
Incomplete patch leads to administrative account takeover
N-able · N-central
ExploitedHigh8.2 - CVE-2026-18556
Unauthenticated administrative account takeover
N-able · N-central
ExploitedHigh8.2 - CVE-2025-11367
N-central windows software probe Remote Code Execution
N-able · N-central
Critical10.0 - CVE-2025-11366
N-central Authentication bypass via path traversal
N-able · N-central
Critical9.4 - CVE-2025-11700
N-central Multiple XXE Injection Vulnerabilities
N-able · N-central
High8.4 - CVE-2025-9316
N-central unauthenticated sessionID generation
N-able · N-central
Medium6.9 - CVE-2025-10231
N-central Incorrect Default Permissions could lead to Privilege Escalation
N-able · N-central
High7.0