Approved changes feed: RSS · Atom
cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N Able (a455ff79-fc53-5101-90dc-1c3ee5e2a8d1) |
|---|---|
| Product | N Central (6b080b23-e06b-5bb7-9758-41812c3a2350) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9316 |
vulnerable | 2026-06-08 07:45:22.283738 |
N-central unauthenticated sessionID generation
N-central < 2025.4 can generate sessionIDs for unauthenticated users
This issue affects N-central: before 2025.4.
Published: 2025-11-12T15:27:25.206Z
Updated: 2025-11-12T18:26:46.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8876 |
vulnerable | 2026-06-08 07:45:21.341350 |
Command Injection Vulnerability
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.
Published: 2025-08-14T14:53:55.176Z
Updated: 2025-10-21T22:45:20.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8875 |
vulnerable | 2026-06-08 07:45:21.340950 |
Insecure Deserialization Vulnerability
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
Published: 2025-08-14T14:56:11.884Z
Updated: 2025-10-21T22:45:20.745Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7051 |
vulnerable | 2026-06-08 07:43:17.933942 |
N-central Syslog Configuration Insecure Direct Object Reference
HIGH (8.3)
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2.
Published: 2025-08-21T17:34:31.126Z
Updated: 2026-02-26T17:48:20.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11700 |
vulnerable | 2026-06-08 07:04:28.786690 |
N-central Multiple XXE Injection Vulnerabilities
N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
Published: 2025-11-12T15:30:38.691Z
Updated: 2025-12-15T14:22:02.364Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11367 |
vulnerable | 2026-06-08 07:02:28.662120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11366 |
vulnerable | 2026-06-08 07:02:28.661714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10231 |
vulnerable | 2026-06-08 07:02:26.478352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8510 |
vulnerable | 2026-06-08 07:00:24.814248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5322 |
vulnerable | 2026-06-08 06:56:15.511417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28200 |
vulnerable | 2026-06-08 06:33:26.730549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47132 |
vulnerable | 2026-06-08 06:14:24.050072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30297 |
vulnerable | 2026-06-08 06:02:43.978053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.