Vulnerabilidades em N-able
15 resultadosAnálise Vexday
N-able apresenta 12 vulnerabilidades cadastradas, das quais 2 estão sob ataque ativo (KEV) e 6 são críticas, configurando um risco moderado consolidado. A fraqueza dominante é path traversal (CWE-22), típica de plataformas de gerenciamento remoto. Ausência de divulgações nos últimos 90 dias sugere que o risco atual não é recente, mas demanda priorização das 2 vulnerabilidades em exploração.
CVE-2025-9316MEDIUMN-central unauthenticated sessionID generationEPSS 36.3%CVE-2025-11700HIGHN-central Multiple XXE Injection VulnerabilitiesEPSS 30.7%CVE-2026-18577HIGHIncomplete patch leads to administrative account takeoverEPSS 4.1%KEVCVE-2025-8876CRITICALCommand Injection VulnerabilityEPSS 3.1%KEVCVE-2024-28200CRITICALN-central Authentication BypassEPSS 1.9%CVE-2025-8875CRITICALInsecure Deserialization VulnerabilityEPSS 1.6%KEVCVE-2025-11367CRITICALN-central windows software probe Remote Code ExecutionEPSS 0.6%CVE-2025-11366CRITICALN-central Authentication bypass via path traversalEPSS 0.6%CVE-2026-18556HIGHUnauthenticated administrative account takeoverEPSS 0.5%KEVCVE-2024-5322CRITICALN-central Authentication Bypass via Session RebindingEPSS 0.4%CVE-2024-8510MEDIUMN-central Path TraversalEPSS 0.4%CVE-2024-5445LOWEcosystem Agent Insufficient Transport Layer SecurityEPSS 0.3%CVE-2025-7051HIGHN-central Syslog Configuration Insecure Direct Object ReferenceEPSS 0.3%CVE-2023-37244MEDIUMPrivilege escalation in N-Able's AutomationManagerAgentEPSS 0.2%CVE-2025-10231HIGHN-central Incorrect Default Permissions could lead to Privilege EscalationEPSS 0.1%