Volerion logoVolerion
Volerion logoVolerion

N-able N-central XML External Entities Injection Vulnerability in Import Service

Vulnerability

A vulnerability allowing XML External Entities (XXE) injection has been identified in N-able N-central versions prior to 2025.4. This vulnerability could lead to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information through XML External Entities injection.

Remediation

Users are advised to update to N-central version 2025.4 or later.

Added: Nov 12, 2025, 4:22 PM
Updated: Nov 12, 2025, 4:22 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
3.3
exploitability
4.9
remediation
7.7
relevance
1.0
threat
1.1
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.