N-central

This hub aggregates every CVE we track for N-central, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting N-central.

• CVE-2025-11367N-central windows software probe Remote Code Execution9.8Nov 12, 2025
• CVE-2025-11366N-central Authentication bypass via path traversal9.8Nov 12, 2025
• CVE-2025-11700N-central Multiple XXE Injection Vulnerabilities7.5Nov 12, 2025
• CVE-2025-10231N-central Incorrect Default Permissions could lead to Privilege Escalation7.0Sep 10, 2025
• CVE-2025-7051N-central Syslog Configuration Insecure Direct Object Reference8.3Aug 21, 2025
• CVE-2025-8875Insecure Deserialization VulnerabilityKEV7.8Aug 14, 2025
• CVE-2025-8876Command Injection VulnerabilityKEV8.8Aug 14, 2025
• CVE-2024-8510N-central Path Traversal5.3Mar 17, 2025
• CVE-2024-28200N-central Authentication Bypass9.1Jul 1, 2024
• CVE-2024-5322N-central Authentication Bypass via Session Rebinding9.1Jul 1, 2024
• CVE-2023-47132An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.9.8Feb 8, 2024
• CVE-2023-30297An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.7.0Aug 3, 2023
• CVE-2020-25622An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF.8.8Dec 16, 2020
• CVE-2020-25621An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has key...8.4Dec 16, 2020
• CVE-2020-25620An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to...7.8Dec 16, 2020