CVE-2025-11366: N-able N-central

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

N-central < 2025.4 is vulnerable to authentication bypass via path traversal

Affected products

• N-able N-central: before 2025.4 (fixed in 2025.4)

Published 2025-11-12. Last modified 2026-06-17.