N-able N-Central Insecure Deserialization Vulnerability

Description

References

• status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1 · Release Notes
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-8875

Weitere Schwachstellen in n-central

• CVE-2026-86218KRITISCH 9.8EXPLOITED (CISA KEV)N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
• CVE-2026-18577HOCH 8.1EXPLOITED (CISA KEV)An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
• CVE-2026-18556HOCH 7.4EXPLOITED (CISA KEV)Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects…
• CVE-2025-11700HOCH 7.5N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
• CVE-2025-11367KRITISCH 9.8The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization