N-able
Security incidents tagged N-able. Newest first.
2 N-able incidents in the last 12 months
- Incidents
- 3
- Live
- 0
- Patched
- 3
- Days without an incident
- 44
- Longest quiet run: 354 days (Aug 14–Aug 2)
Show 3 older incidents3 older incidents
September 2026 1
HighN-able N-central: N-able N-central Static Code Injection VulnerabilityPatched
N-able N-central Patched
N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution. Added to CISA KEV on 2026-09-08.
Open incident →CVE-2026-86218
August 2026 1
HighN-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatched
N-able N-central Patched
N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556. CISA added CVE-2026-18577, CVE-2026-18556 to the Known Exploited Vulnerabilities catalog on 2026-08-03 based on evidence of active exploitation.
Open incident →CVE-2026-18577 · CVE-2026-18556
August 2025 1
CriticalN-able N-Central: 2 exploited vulnerabilities (CVE-2025-8875, CVE-2025-8876)Patched
N-able N-Central Patched
CVE-2025-8875: N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution. CVE-2025-8876: N-able N-Central contains a command injection vulnerability via improper sanitization of user input. Added to CISA KEV on 2025-08-13.
Open incident →CVE-2025-8875 · CVE-2025-8876
