Login Request a demo
NC
Product
N-central
by N-able · last CVE Sep 6, 2026
On CISA KEVExploited in the wild
17
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news12Timeline
Severity mix
Critical 6High 9Medium 2Low 0
Severity
All severities17Critical6High9Medium2Low0
Exploitation
On CISA KEV5Exploited in the wild5
Watch

Add N-central to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86218
In wildKEV
9.8
15%
Sep 6
pre-authentication remote code execution
Affected: before 2026.3.1.14
CVE-2025-11367
9.8
1%
Nov 12
The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
Affected: before 2025.4
CVE-2025-11366
9.8
1%
Nov 12
N-central < 2025.4 is vulnerable to authentication bypass via path traversal
Affected: before 2025.4
CVE-2024-28200
9.8
2%
Jul 1
The N-central server is vulnerable to an authentication bypass of the user interface
Affected: before 2024.2
CVE-2023-47132
9.8
1%
Feb 8
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls
Affected: before 2023.7
CVE-2024-5322
9.1
0%
Jul 1
The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass
Affected: before 2024.3
Showing 6