VulnerabilityModified

CVE-2025-11700

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

HIGH 8.4EPSS 30.7%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 30.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

CVSS 4.0: 8.4 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 30.70% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-611
Affected: n-able/n-central
Source: a5532a13-c4dd-4202-bef1-e0b8f2f8d12b

References

https://me.n-able.com/s/security-advisory/aArVy0000000rabKAA

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.