NA
Vendor
N-able
26
CVEs
5
On KEV
0
New 30D
Products
NC9.8
N-central
N-able
18 CVEs5 on KEV0 new
PA7.5
PassPortal
N-able
2 CVEs0 on KEV0 new
AM7.0
Automation Manager
N-able
1 CVEs0 on KEV0 new
AM7.0
Automation Manager Agent
N-able
1 CVEs0 on KEV0 new
AU7.0
AutomationManagerAgent
N-Able
1 CVEs0 on KEV0 new
EA3.8
Ecosystem Agent
N-able
1 CVEs0 on KEV0 new
MA4.3
Mail Assure
N-able
1 CVEs0 on KEV0 new
TC7.0
Take Control
N-able
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-68624 | MA Mail Assure N-able | 4.3 | Sep 14 | N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging… |
| CVE-2026-86218 In wildKEV | NC N-central N-able | 9.8 | Sep 6 | pre-authentication remote code execution |
| CVE-2026-86206 | NC N-central N-able | 6.9 | Sep 5 | Access control filter bypass allows unauthorised access to APIs |
| CVE-2026-86207 | NC N-central N-able | 7.7 | Sep 5 | Authentication bypass leads to unauthorised access to N-central |
| CVE-2026-15580 | PA PassPortal N-able | 6.9 | Aug 21 | PassPortal browser extension: vault token disclosure via unvalidated postMessage |
| CVE-2026-18577 In wildKEV | NC N-central N-able | 8.1 | Aug 2 | Incomplete patch leads to administrative account takeover |
| CVE-2026-18556 In wildKEV | NC N-central N-able | 7.4 | Aug 1 | Unauthenticated administrative account takeover |
| CVE-2025-11367 | NC N-central N-able | 9.8 | Nov 12 | N-central windows software probe Remote Code Execution |
| CVE-2025-11366 | NC N-central N-able | 9.8 | Nov 12 | N-central Authentication bypass via path traversal |
| CVE-2025-11700 | NC N-central N-able | 7.5 | Nov 12 | N-central Multiple XXE Injection Vulnerabilities |
| CVE-2025-9316 | NC N-central N-able | 6.9 | Nov 12 | N-central unauthenticated sessionID generation |
| CVE-2025-10231 | NC N-central N-able | 7.8 | Sep 10 | N-central Incorrect Default Permissions could lead to Privilege Escalation |
| CVE-2025-7051 | NC N-central N-able | 8.3 | Aug 21 | N-central Syslog Configuration Insecure Direct Object Reference |
| CVE-2025-8875 In wildKEV | NC N-central N-able | 7.8 | Aug 14 | Insecure Deserialization Vulnerability |
| CVE-2025-8876 In wildKEV | NC N-central N-able | 8.8 | Aug 14 | Command Injection Vulnerability |
| CVE-2024-8510 | NC N-central N-able | 5.3 | Mar 17 | N-central Path Traversal |
| CVE-2024-5445 | EA Ecosystem Agent N-able | 3.8 | Aug 8 | Ecosystem Agent Insufficient Transport Layer Security |
| CVE-2024-28200 | NC N-central N-able | 9.8 | Jul 1 | N-central Authentication Bypass |
| CVE-2024-5322 | NC N-central N-able | 9.1 | Jul 1 | N-central Authentication Bypass via Session Rebinding |
| CVE-2023-37244 | AU AutomationManagerAgent N-Able | 7.0 | May 2 | Privilege escalation in N-Able's AutomationManagerAgent |
| CVE-2023-47132 | NC N-central N-able | 9.8 | Feb 8 | An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls |
| CVE-2023-47131 | PA Passportal N-able | 7.5 | Feb 8 | The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file |
| CVE-2023-27470 | TC Take Control N-able | 7.0 | Sep 11 | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at… |
| CVE-2023-30297 | NC N-central N-able | 7.0 | Aug 4 | An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server |