← All advisories

High severityNVD Advisory· Published Nov 10, 2026

CVE-2026-125880

CVE-2026-125880

Description

Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS).

This issue affects N-central: before 26.4.1.

Affected products

1

N-able/N-centralllm-fuzzy
Range: <26.4.1

Patches

Vulnerability mechanics

References

1

me.n-able.com/s/security-advisory/aArVy0000002imXKAQ/cve202612588-stored-xss-via-mms3-patch-metadata-admin-contextnvd

News mentions

0

No linked articles in our index yet.