Critical 9.3

Schema-hint SSRF via service import schema validation

CVE-2026-125881 First seen on SecPulse 06:24

Summary

Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request Forgery.

This issue affects N-central: before 26.4.1.

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
N-able	N-ableN-central	< 26.4.1→ 26.4.1	26.4.1

References

• web me.n-able.com