CVE

CVE-2026-125878

N-able N-central

8.7: CVSS 4.0
1: story

Severity: 8.7 High · vendor score
Vendor: N-able
Product: N-central
Published: Nov 10, 2026
Weakness: CWE-79

What it is

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection.

This issue affects N-central: before 26.4.1.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑

NOV 12
VulnerabilitiesAnother N-able Vulnerability EmergesThe new bug affects fully patched versions of N-able N-central.DENNIS FISHER · 2 MIN

Official references

2 sources

Registries

RegistryNVDScore, weakness and every reference RegistryCVE.orgThe official CVE record