← All advisories

Medium severityNVD Advisory· Published Nov 12, 2025· Updated Jun 17, 2026

CVE-2025-9316

CVE-2025-9316

Description

N-central < 2025.4 can generate sessionIDs for unauthenticated users

This issue affects N-central: before 2025.4.

Affected products

1

N-able/N-centralllm-fuzzy
Range: <2025.4

Patches

Vulnerability mechanics

References

1

me.n-able.com/s/security-advisory/aArVy0000000rdpKAA/cve20259316-ncentral-unauthenticated-sessionid-generationnvd

News mentions

1

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
The Hacker News · Jul 6, 2026