NA
Vendor
N-able
22
CVEs
5
On KEV
0
New 30D
Products
NC9.8
N-central
N-able
17 CVEs5 on KEV0 new
PA7.5
PassPortal
N-able
2 CVEs0 on KEV0 new
AM7.0
Automation Manager
N-able
1 CVEs0 on KEV0 new
MA4.3
Mail Assure
N-able
1 CVEs0 on KEV0 new
TC7.0
Take Control
N-able
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-68624 | MA Mail Assure N-able | 4.3 | Sep 14 | N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging… |
| CVE-2026-86218 In wildKEV | NC N-central N-able | 9.8 | Sep 6 | pre-authentication remote code execution |
| CVE-2026-86206 | NC N-central N-able | 6.9 | Sep 5 | Access control filter bypass allows unauthorised access to APIs |
| CVE-2026-86207 | NC N-central N-able | 7.7 | Sep 5 | Authentication bypass leads to unauthorised access to N-central |
| CVE-2026-15580 | PA PassPortal N-able | 6.9 | Aug 21 | PassPortal browser extension: vault token disclosure via unvalidated postMessage |
| CVE-2026-18577 In wildKEV | NC N-central N-able | 8.1 | Aug 2 | Incomplete patch leads to administrative account takeover |
| CVE-2026-18556 In wildKEV | NC N-central N-able | 7.4 | Aug 1 | Unauthenticated administrative account takeover |
| CVE-2025-11700 | NC N-central N-able | 7.5 | Nov 12 | N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure |
| CVE-2025-11367 | NC N-central N-able | 9.8 | Nov 12 | The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization |
| CVE-2025-11366 | NC N-central N-able | 9.8 | Nov 12 | N-central < 2025.4 is vulnerable to authentication bypass via path traversal |
| CVE-2025-10231 | NC N-central N-able | 7.8 | Sep 10 | An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with… |
| CVE-2025-7051 | NC N-central N-able | 8.3 | Aug 21 | On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server |
| CVE-2025-8875 In wildKEV | NC N-central N-able | 7.8 | Aug 14 | Insecure Deserialization Vulnerability |
| CVE-2025-8876 In wildKEV | NC N-central N-able | 8.8 | Aug 14 | Command Injection Vulnerability |
| CVE-2024-8510 | NC N-central N-able | 5.3 | Mar 17 | N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory |
| CVE-2024-5322 | NC N-central N-able | 9.1 | Jul 1 | The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass |
| CVE-2024-28200 | NC N-central N-able | 9.8 | Jul 1 | The N-central server is vulnerable to an authentication bypass of the user interface |
| CVE-2023-37244 | AM Automation Manager N-able | 7.0 | May 2 | The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at… |
| CVE-2023-47132 | NC N-central N-able | 9.8 | Feb 8 | An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls |
| CVE-2023-47131 | PA Passportal N-able | 7.5 | Feb 8 | The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file |
| CVE-2023-27470 | TC Take Control N-able | 7.0 | Sep 11 | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at… |
| CVE-2023-30297 | NC N-central N-able | 7.0 | Aug 4 | An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server |