๐Ÿ” CVE Alert

CVE-2026-125878

UNKNOWN 0.0

Multiple OGNL Injection vulnerabilities

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection. This issue affects N-central: before 26.4.1.

CWE CWE-79
Vendor n-able
Product n-central
Published Nov 10, 2026
Stay Ahead of the Next One

Get instant alerts for n-able n-central

Be the first to know when new unknown vulnerabilities affecting n-able n-central are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

N-able / N-central
0 < 26.4.1

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
me.n-able.com: https://me.n-able.com/s/security-advisory/aArVy0000002ijJKAQ/cve2026125878-multiple-ognl-injection-vulnerabilities-lead-to-rce