Vulnerabilities in N-Able

15 results
Vexday analysis

N-Able apresenta um perfil de risco mínimo com apenas 1 CVE registrado na base e nenhuma vulnerabilidade sob ataque ativo ou crítica. A fraqueza identificada (CWE-362 - Condição de corrida) é de natureza tática e não representa ameaça imediata, especialmente pela ausência de exploração observada.

CVE-2025-9316MEDIUMN-central unauthenticated sessionID generationEPSS 36.3%CVE-2025-11700HIGHN-central Multiple XXE Injection VulnerabilitiesEPSS 30.7%CVE-2026-18577HIGHIncomplete patch leads to administrative account takeoverEPSS 4.1%KEVCVE-2025-8876CRITICALCommand Injection VulnerabilityEPSS 3.1%KEVCVE-2024-28200CRITICALN-central Authentication BypassEPSS 1.9%CVE-2025-8875CRITICALInsecure Deserialization VulnerabilityEPSS 1.6%KEVCVE-2025-11367CRITICALN-central windows software probe Remote Code ExecutionEPSS 0.6%CVE-2025-11366CRITICALN-central Authentication bypass via path traversalEPSS 0.6%CVE-2026-18556HIGHUnauthenticated administrative account takeoverEPSS 0.5%KEVCVE-2024-5322CRITICALN-central Authentication Bypass via Session RebindingEPSS 0.4%CVE-2024-8510MEDIUMN-central Path TraversalEPSS 0.4%CVE-2024-5445LOWEcosystem Agent Insufficient Transport Layer SecurityEPSS 0.3%CVE-2025-7051HIGHN-central Syslog Configuration Insecure Direct Object ReferenceEPSS 0.3%CVE-2023-37244MEDIUMPrivilege escalation in N-Able's AutomationManagerAgentEPSS 0.2%CVE-2025-10231HIGHN-central Incorrect Default Permissions could lead to Privilege EscalationEPSS 0.1%