Skip to content

CVE record · 3 sources

CVE-2026-91000

CVSS 8.4

Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation.

Vendor: N-able
Product: N-central
CVSS v4.0: 8.4 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS: 0.15 (p97)
Weakness: CWE-306
Exposure class: Remote access

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

57

Research Rapid7 30h ago

Critical vulnerabilities in N-able N-central prompt hosted shutdown

Overview On November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central , its remote monitoring and management (RMM) platform. In a public disclosure titled…

PoC public EPSS 0.15 Fix available CVE-2026-18577 CVE-2026-125883 CVE-2026-125878+5 more N-able
58

Tenable research Tenable 15h ago

Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities

N-able released a hotfix for N-central that fixes seven CVEs after a researcher published proof-of-concept code for 33 alleged zero-day vulnerabilities. The researcher says one attack chain needs no credentials. Key Takeaways…

PoC public Fix available CVE-2026-91000 CVE-2026-125883 CVE-2026-125881+9 more N-able
43

CVE NVD 22h ago

Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation.

Missing authentication for critical function vulnerability in N-able N-central allows Privilege Escalation. This issue affects N-central: before 2026.4.1.

CVSS 8.4 CVE-2026-91000 N-able