N-able kayıtları
n-able üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 5 · %27,8
- Silahlaştırılmış
- 6 · %33,3
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %22,2
- Yayından KEV’e ortanca
- 1 gün
Tekrar eden sınıflar
- CWE-288 Authentication Bypass Using an Alternate Path or Channel4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-502 Deserialization of Untrusted Data2
- CWE-284 Improper Access Control1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
74Bu hafta | CVE-2026-86218Silahlaştırılmış | pre-authentication remote code executionn-able · n-central · CWE-96 | Kritik10,0 | KEV | %12,9 | 5 Eyl 2026 |
68Bu hafta | CVE-2025-8876Silahlaştırılmış | Command Injection Vulnerabilityn-able · n-central · CWE-20 | Kritik9,4 | KEV | %3,4 | 14 Ağu 2025 |
68Bu hafta | CVE-2025-8875Silahlaştırılmış | Insecure Deserialization Vulnerabilityn-able · n-central · CWE-502 | Kritik9,4 | KEV | %1,9 | 14 Ağu 2025 |
66Bu hafta | CVE-2026-18577Silahlaştırılmış | Incomplete patch leads to administrative account takeovern-able · n-central · CWE-288 | Yüksek8,2 | KEV | %14,6 | 2 Ağu 2026 |
64Bu hafta | CVE-2026-18556Silahlaştırılmış | Unauthenticated administrative account takeovern-able · n-central · CWE-288 | Yüksek8,2 | KEV | %7,9 | 1 Ağu 2026 |
42Planlayın | CVE-2025-11700Silahlaştırılmış | N-central Multiple XXE Injection Vulnerabilitiesn-able · n-central · CWE-611 | Yüksek8,4 | — | %30,7 | 12 Kas 2025 |
40Planlayın | CVE-2024-28200Kavram kanıtı | N-central Authentication Bypassn-able · n-central · CWE-288 | Kritik9,8 | — | %1,9 | 1 Tem 2024 |
40Planlayın | CVE-2025-11367İstismar yok | N-central windows software probe Remote Code Executionn-able · n-central · CWE-502 | Kritik10,0 | — | %0,6 | 12 Kas 2025 |
39İzleyin | CVE-2023-47132İstismar yok | An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.n-able · n-central · CWE-269 | Kritik9,8 | — | %0,6 | 8 Şub 2024 |
37İzleyin | CVE-2025-11366İstismar yok | N-central Authentication bypass via path traversaln-able · n-central · CWE-22 | Kritik9,4 | — | %0,6 | 12 Kas 2025 |
36İzleyin | CVE-2024-5322İstismar yok | N-central Authentication Bypass via Session Rebindingn-able · n-central · CWE-288 | Kritik9,1 | — | %0,4 | 1 Tem 2024 |
33İzleyin | CVE-2025-7051İstismar yok | N-central Syslog Configuration Insecure Direct Object Referencen-able · n-central · CWE-284 | Yüksek8,3 | — | %0,3 | 21 Ağu 2025 |
31İzleyin | CVE-2025-10231İstismar yok | N-central Incorrect Default Permissions could lead to Privilege Escalationn-able · n-central · CWE-276 | Yüksek7,8 | — | %0,1 | 10 Eyl 2025 |
30İzleyin | CVE-2023-47131İstismar yok | The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.n-able · passportal · CWE-532 | Yüksek7,5 | — | %0,5 | 8 Şub 2024 |
28İzleyin | CVE-2023-27470Kavram kanıtı | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROn-able · take control · CWE-367 | Yüksek7,0 | — | %0,5 | 11 Eyl 2023 |
28İzleyin | CVE-2023-37244İstismar yok | Privilege escalation in N-Able's AutomationManagerAgentn-able · automation manager · CWE-362 | Yüksek7,0 | — | %0,2 | 2 May 2024 |
28İzleyin | CVE-2023-30297İstismar yok | An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring fun-able · n-central | Yüksek7,0 | — | %0,2 | 3 Ağu 2023 |
21İzleyin | CVE-2024-8510İstismar yok | N-central Path Traversaln-able · n-central · CWE-22 | Orta5,3 | — | %0,4 | 17 Mar 2025 |
- CVE-2026-8621874Bu hafta
pre-authentication remote code execution
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %13n-able · n-central5 Eyl 2026
- CVE-2025-887668Bu hafta
Command Injection Vulnerability
KritikCVSS 9,4KEVSilahlaştırılmışEPSS %3n-able · n-central14 Ağu 2025
- CVE-2025-887568Bu hafta
Insecure Deserialization Vulnerability
KritikCVSS 9,4KEVSilahlaştırılmışEPSS %2n-able · n-central14 Ağu 2025
- CVE-2026-1857766Bu hafta
Incomplete patch leads to administrative account takeover
YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %15n-able · n-central2 Ağu 2026
- CVE-2026-1855664Bu hafta
Unauthenticated administrative account takeover
YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %8n-able · n-central1 Ağu 2026
- CVE-2025-1170042Planlayın
N-central Multiple XXE Injection Vulnerabilities
YüksekCVSS 8,4SilahlaştırılmışEPSS %31n-able · n-central12 Kas 2025
- CVE-2024-2820040Planlayın
N-central Authentication Bypass
KritikCVSS 9,8Kavram kanıtıEPSS %2n-able · n-central1 Tem 2024
- CVE-2025-1136740Planlayın
N-central windows software probe Remote Code Execution
KritikCVSS 10,0İstismar yokEPSS %1n-able · n-central12 Kas 2025
- CVE-2023-4713239İzleyin
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.
KritikCVSS 9,8İstismar yokEPSS %1n-able · n-central8 Şub 2024
- CVE-2025-1136637İzleyin
N-central Authentication bypass via path traversal
KritikCVSS 9,4İstismar yokEPSS %1n-able · n-central12 Kas 2025
- CVE-2024-532236İzleyin
N-central Authentication Bypass via Session Rebinding
KritikCVSS 9,1İstismar yokEPSS %0n-able · n-central1 Tem 2024
- CVE-2025-705133İzleyin
N-central Syslog Configuration Insecure Direct Object Reference
YüksekCVSS 8,3İstismar yokEPSS %0n-able · n-central21 Ağu 2025
- CVE-2025-1023131İzleyin
N-central Incorrect Default Permissions could lead to Privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0n-able · n-central10 Eyl 2025
- CVE-2023-4713130İzleyin
The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.
YüksekCVSS 7,5İstismar yokEPSS %0n-able · passportal8 Şub 2024
- CVE-2023-2747028İzleyin
BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PRO
YüksekCVSS 7,0Kavram kanıtıEPSS %1n-able · take control11 Eyl 2023
- CVE-2023-3724428İzleyin
Privilege escalation in N-Able's AutomationManagerAgent
YüksekCVSS 7,0İstismar yokEPSS %0n-able · automation manager2 May 2024
- CVE-2023-3029728İzleyin
An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring fu
YüksekCVSS 7,0İstismar yokEPSS %0n-able · n-central3 Ağu 2023
- CVE-2024-851021İzleyin
N-central Path Traversal
OrtaCVSS 5,3İstismar yokEPSS %0n-able · n-central17 Mar 2025