Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium4.3N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresse…CVE-2025-68624 · CVE.org · FIRST EPSS · NIST NVD · N-ableEPSS 0.3%Sep 14, 2026
Critical10.0N-able N-central Static Code Injection VulnerabilityCVE-2026-86218 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSS · N-ableKEVEPSS 13.3%Sep 5, 2026
Medium6.9vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse.CVE-2026-15580 · CVE.org · NIST NVD · N-ableAug 21, 2026
High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-18577 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSS · N-ableKEVEPSS 14.6%Aug 2, 2026
High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-18556 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSS · N-ableKEVEPSS 7.9%Aug 1, 2026
Critical9.4N-able N-Central Command Injection VulnerabilityCVE-2025-8876 · n-able · n-central · CISA KEV · CVE.org · FIRST EPSS · N-ableKEVEPSS 3.4%Aug 13, 2025
Critical9.4N-able N-Central Insecure Deserialization VulnerabilityCVE-2025-8875 · n-able · n-central · CISA KEV · CVE.org · FIRST EPSS · N-ableKEVEPSS 1.9%Aug 13, 2025