CVE

CVE-2026-125883

N-able N-central

9.3: CVSS 4.0
1: story

Severity: 9.3 Critical · vendor score
Vendor: N-able
Product: N-central
Published: Nov 10, 2026
Weakness: CWE-611

What it is

Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning.

This issue affects N-central: before 26.4.1.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑

NOV 12
VulnerabilitiesAnother N-able Vulnerability EmergesThe new bug affects fully patched versions of N-able N-central.DENNIS FISHER · 2 MIN

Official references

2 sources

Registries

RegistryNVDScore, weakness and every reference RegistryCVE.orgThe official CVE record