CVE-2025-9316: N-able N-central

Medium severity, CVSS 6.9. EPSS: 36.3% chance of exploitation in the next 30 days.

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

Affected products

• N-able N-central: before 2025.4 (fixed in 2025.4)

Published 2025-11-12. Last modified 2026-06-17.