pre-authentication remote code execution

Command Injection Vulnerability

Incomplete patch leads to administrative account takeover

Insecure Deserialization Vulnerability

Unauthenticated administrative account takeover

The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization

N-central < 2025.4 is vulnerable to authentication bypass via path traversal

The N-central server is vulnerable to an authentication bypass of the user interface

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with…

Authentication bypass leads to unauthorised access to N-central

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server

Access control filter bypass allows unauthorised access to APIs

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory