CVE-2024-28200criticalexploração observadaCWE-288

CVE-2024-28200: falha crítica em N-able N-central

N-central Authentication Bypass

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar N-central

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

65Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 9.1epss 1.9%
da publicação à arma
Publicada no NVD1 de jul.
VulnCheck11 de abr.
The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
N-able · N-central
CVEs relacionadas — N-able N-central

No mesmo produto, das mais perigosas para as menos.

CVE-2026-86218CRITICALpre-authentication remote code executionEPSS 15.4%KEVCVE-2026-18577HIGHIncomplete patch leads to administrative account takeoverEPSS 14.6%KEVCVE-2026-18556HIGHUnauthenticated administrative account takeoverEPSS 7.9%KEVCVE-2025-8876CRITICALCommand Injection VulnerabilityEPSS 4.1%KEVCVE-2025-8875CRITICALInsecure Deserialization VulnerabilityEPSS 2.3%KEVCVE-2025-9316MEDIUMN-central unauthenticated sessionID generationEPSS 37.4%