Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

N-able

Products: N-central

120.4

Score

4

CVEs

4

Active

0

PoC

4

KEV

#19

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-18577	2026-08-02	8.2v4.0	ACTIVE		High	None	YES	33.8	N-central	An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
CVE-2026-18556	2026-08-01	8.2v4.0	ACTIVE		High	None	YES	33.8	N-central	Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.
CVE-2025-8875	2025-08-14	9.4v4.0	ACTIVE		Low	Low	no	26.4	N-central	Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
CVE-2025-8876	2025-08-14	9.4v4.0	ACTIVE		Low	Low	no	26.4	N-central	Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3