A detailed explainer is available in Japanese.
Read the Japanese explainer
Critical
9.3
N-central脆弱性2件、修正版26.4.1が公開済み
CVE-2026-125883
First seen on SecPulse
Summary
N-able N-centralの26.4.1より前の版に、XXEとSSRFの重大な脆弱性が2件公表されました。N-centralを運用する企業やMSPは、修正版の26.4.1へ早めに更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
N-able N-centralの26.4.1より前の版に、XXEとSSRFの重大な脆弱性が2件公表されました。N-centralを運用する企業やMSPは、修正版の26.4.1へ早めに更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| N-ableN-central |
< 26.4.1→ 26.4.1 |
26.4.1 |
Original description The description as published by the source.
Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning.
This issue affects N-central: before 26.4.1.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- web me.n-able.com