Known vulnerabilities in N-central
Vendor:
N‑able
Software:
N-central
Software CPE:
cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*
Website:
https://www.n-able.com/
Total vulnerabilities:
5
Public exploits:
1
Known exploited (KEV):
5
Breakdown by Severity Chart
2026.3.1.14
2026.3.1.13
2026.3.1.12
2026.3.1.11
2026.3.1.10
2026.3.1.9
2026.3.1.8
2026.3.1.7
2026.3.1.6
2026.3.1.5
2026.3.1.4
2026.3.1.3
2026.3.1.2
2026.3.1.1
2026.3.1
2026.3
2024.1
2024.2
2024.3
2024.4
2024.6
2024.6.1
2024.6.2
2025.1.1
2025.1
2025.2
2025.2.1
2025.3
2025.3.1
2025.4
2025.4.1
2026.1
2026.2.1
2022.1
2022.2
2022.3
2022.4
2022.5
2022.5.1
2022.5.2
2022.6
2022.7
2022.7.1
2022.8
2023.1
2023.2
2023.3
2023.4
2023.5
2023.6
2023.7
2023.7.1
2023.8
2023.9
2023.9.1
2021.1
2021.1.1
2021.1.2
2021.1.3
2021.1.4
2021.1.5
2021.1.6
2021.1.7
2021.1.8
2021.2
2021.3
2021.3.1
2026.2
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147318 - Improper input validation CVE-2026-86218 |
CWE-20 | High | 2026.3.1.14 | 07.09.2026 |
SB2026090799 |
||
| #VU140802 - Authentication Bypass Using an Alternate Path or Channel CVE-2026-18577 |
CWE-288 | Critical | 2026.3.1 | 03.08.2026 |
SB2026080385 |
||
| #VU140801 - Authentication Bypass Using an Alternate Path or Channel CVE-2026-18556 |
CWE-288 | High | 2026.2 | 03.08.2026 |
SB2026080384 |
||
| #VU158434 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-8876 |
CWE-78 | High | 2025.3.1 | 01.09.2025 |
SB2025090134 |
||
| #VU158433 - Deserialization of Untrusted Data CVE-2025-8875 |
CWE-502 | High | 2025.3.1 | 01.09.2025 |
SB2025090134 |