CVE-2020-25620: SolarWinds N-central

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to the N-Central Administrative Console (NAC) and/or the regular web interface.

Affected products

• SolarWinds N-central: version 12.3.0.670 only

Published 2020-12-16. Last modified 2026-06-17.