← All advisories

High severityNVD Advisory· Published Nov 10, 2026

CVE-2026-125878

CVE-2026-125878

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection.

This issue affects N-central: before 26.4.1.

Affected products

1

N-able/N-centralllm-fuzzy
Range: <26.4.1

Patches

Vulnerability mechanics

References

1

me.n-able.com/s/security-advisory/aArVy0000002ijJKAQ/cve2026125878-multiple-ognl-injection-vulnerabilities-lead-to-rcenvd

News mentions

0

No linked articles in our index yet.