CVE-2025-11700highobserved exploitationCWE-611

N-central Multiple XXE Injection Vulnerabilities

90Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 8.4epss 31%

from disclosure to weapon2 days

Published on NVDNov 12

1st PoC+2d

metasploit+5d

VulnCheck+33d

exploitation probability

31%top 2% of all CVEs

observed exploitation

yesVulnCheck

1 public exploit(s)

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:L

Affected products

public PoCs found — 1

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References