NC
Product
N-central
On CISA KEVExploited in the wild
18
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 3Low 0
Watch
Add N-central to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8876 In wildKEV | 8.8 | Aug 14 | Command Injection Vulnerability Affected: before 2025.3.1 |
| CVE-2026-18577 In wildKEV | 8.1 | Aug 2 | Incomplete patch leads to administrative account takeover Affected: through 2026.3 |
| CVE-2025-8875 In wildKEV | 7.8 | Aug 14 | Insecure Deserialization Vulnerability Affected: before 2025.3.1 |
| CVE-2026-18556 In wildKEV | 7.4 | Aug 1 | Unauthenticated administrative account takeover Affected: through 2026.1 |
| CVE-2025-7051 | 8.3 | Aug 21 | N-central Syslog Configuration Insecure Direct Object Reference Affected: 2024.6.0 through 2024.6.16; 2025.1 |
| CVE-2025-10231 | 7.8 | Sep 10 | N-central Incorrect Default Permissions could lead to Privilege Escalation Affected: before 2025.3 |
| CVE-2026-86207 | 7.7 | Sep 5 | Authentication bypass leads to unauthorised access to N-central Affected: before 2026.3.1.13 |
| CVE-2025-11700 | 7.5 | Nov 12 | N-central Multiple XXE Injection Vulnerabilities Affected: before 2025.4 |
| CVE-2023-30297 | 7.0 | Aug 4 | An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server Affected: before 2023.4 |
Showing 9