N-able N-central Static Code Injection Vulnerability

Mô tả

Tham khảo

• me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-86218

Lỗ hổng khác của n-central

• CVE-2026-18577CAO 8.1ĐANG BỊ KHAI THÁC (CISA KEV)An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
• CVE-2026-18556CAO 7.4ĐANG BỊ KHAI THÁC (CISA KEV)Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects…
• CVE-2025-11700CAO 7.5N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
• CVE-2025-11367NGHIÊM TRỌNG 9.8The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
• CVE-2025-11366NGHIÊM TRỌNG 9.8N-central < 2025.4 is vulnerable to authentication bypass via path traversal