CVE-2024-5322

CRITICAL 9.1CVE-2024-5322 · Published 01/07/2024 · updated 17/06/2026

In short

CVE-2024-5322 is a CRITICAL (CVSS 9.1) vulnerability affecting n-central (n-able).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.2% of all vulnerabilities.
Fix: update to 2024.3 or later.

Package	Affected versions	Patched versions
n-central n-able	`< 2024.3`	`2024.3`

Description

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.

References

documentation.n-able.com/N-central/Release_Notes/GA/Content/2024.3%20Release%20Notes.htm · Release Notes
me.n-able.com/s/security-advisory/aArVy0000000BgDKAU/cve20245322-ncentral-authentication-bypass-via-session-rebinding · Vendor Advisory

More vulnerabilities in n-central

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

n-central

n-able

< 2024.3

2024.3

More vulnerabilities in n-central

See all →