NC
Product
N-central
On CISA KEVExploited in the wild
17
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 2Low 0
Watch
Add N-central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8876 In wildKEV | 8.8 | Aug 14 | Command Injection Vulnerability Affected: before 2025.3.1 |
| CVE-2026-18577 In wildKEV | 8.1 | Aug 2 | Incomplete patch leads to administrative account takeover Affected: through 2026.3 |
| CVE-2025-8875 In wildKEV | 7.8 | Aug 14 | Insecure Deserialization Vulnerability Affected: before 2025.3.1 |
| CVE-2026-18556 In wildKEV | 7.4 | Aug 1 | Unauthenticated administrative account takeover Affected: through 2026.1 |
| CVE-2025-7051 | 8.3 | Aug 21 | On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server Affected: before 2025.2 |
| CVE-2025-10231 | 7.8 | Sep 10 | An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with… Affected: before 2025.3 |
| CVE-2026-86207 | 7.7 | Sep 5 | Authentication bypass leads to unauthorised access to N-central Affected: before 2026.3.1.13 |
| CVE-2025-11700 | 7.5 | Nov 12 | N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure Affected: before 2025.4 |
| CVE-2023-30297 | 7.0 | Aug 4 | An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server Affected: before 2023.4 |
Showing 9