{"id":"CVE-2026-125958","kind":"vulnerability","aliases":["CVE-2026-125958"],"related":[],"title":"N-able N-central: downloaded code runs without integrity check","description":"Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion.\n\nThis issue affects N-central: through 24.6.1.","summary":"N-able N-central downloads code without verifying its integrity, so an attacker who can alter that download can get their code included and run. The sources state that versions through 24.6.1 are affected.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"N-central","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["msp","n-able","n-central","self-hosted","vendor"],"not_affected_if":["newer-version"],"how_to_check":"- Check the installed N-central version against `24.6.1` or earlier in the N-central admin console.","fix":"- Move N-central past `24.6.1`; the sources do not name the fixed version.","status":"open","published_at":"2026-11-10T22:18:31+00:00","first_seen_at":"2026-11-10T22:27:29+00:00","triaged_at":"2026-11-10T22:29:12+00:00","updated_at":"2026-11-10T22:29:12+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T22:29:12Z","model":"claude-haiku-5-5","output":{"fix":"- Move N-central past `24.6.1`; the sources do not name the fixed version.","reach":"unknown","title":"N-able N-central: downloaded code runs without integrity check","impact":"high","summary":"N-able N-central downloads code without verifying its integrity, so an attacker who can alter that download can get their code included and run. The sources state that versions through 24.6.1 are affected.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["n-able","n-central","msp","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker code runs inside the N-central server","analyst_note":"Find the N-able advisory for CVE-2026-125958 to confirm the fixed version, the download source and the attack path.","how_to_check":"- Check the installed N-central version against `24.6.1` or earlier in the N-central admin console.\n- unknown for any other check, as the sources do not say.","plain_action":"","product_name":"N-central","needs_analyst":true,"not_affected_if":["newer-version"],"who_is_affected":"Organisations running N-able N-central through version 24.6.1, the remote monitoring and management server used by managed service providers. The sources do not say which deployment or network path is needed to abuse the download, so exposure beyond the version range is unknown.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000707,"input_tokens":4500,"output_tokens":513,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-125958':15A,18A '-2026':14A,17A '24.6.1':66B,94C 'abl':3A,25B,35B,79C 'affect':68B,89C 'allow':83C 'alter':50B 'attack':47B 'central':6A,21A,28B,38B,82C,92C 'check':12A,74C 'code':8A,40B,56B,71C,85C 'cve':13A,16A 'download':7A,39B,52B,69C 'get':54B 'host':31B 'includ':57B 'inclus':86C 'integr':11A,44B,73C 'issu':88C 'msp':22B 'n':2A,5A,20A,24B,27B,34B,37B,78C,81C,91C 'n-abl':1A,23B,33B,77C 'n-central':4A,19A,26B,36B,80C,90C 'remot':84C 'run':9A,59B 'self':30B 'self-host':29B 'sourc':61B 'state':62B 'vendor':32B 'verifi':42B 'version':64B 'vulner':75C 'without':10A,41B,72C","nicknames":[],"mitigations":[],"who_affected":"Organisations running N-able N-central through version 24.6.1, the remote monitoring and management server used by managed service providers. The sources do not say which deployment or network path is needed to abuse the download, so exposure beyond the version range is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["ncentral"],"ptokens":["central"],"labels":["high","msp","nable","ncentral","selfhosted","vendor"],"campaign_type":null,"search_a":"'-125958':15A,18A '-2026':14A,17A 'abl':3A 'central':6A,21A 'check':12A 'code':8A 'cve':13A,16A 'download':7A 'integr':11A 'n':2A,5A,20A 'n-abl':1A 'n-central':4A,19A 'run':9A 'without':10A","search_b":"'24.6.1':66B 'abl':25B,35B 'affect':68B 'alter':50B 'attack':47B 'central':28B,38B 'code':40B,56B 'download':39B,52B 'get':54B 'host':31B 'includ':57B 'integr':44B 'msp':22B 'n':24B,27B,34B,37B 'n-abl':23B,33B 'n-central':26B,36B 'run':59B 'self':30B 'self-host':29B 'sourc':61B 'state':62B 'vendor':32B 'verifi':42B 'version':64B 'without':41B","search_c":"'24.6.1':94C 'abl':79C 'affect':89C 'allow':83C 'central':82C,92C 'check':74C 'code':71C,85C 'download':69C 'inclus':86C 'integr':73C 'issu':88C 'n':78C,81C,91C 'n-abl':77C 'n-central':80C,90C 'remot':84C 'vulner':75C 'without':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:18:31+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125958","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125958","severity":null,"published_at":"2026-11-10T22:18:31+00:00","modified_at":"2026-11-10T22:18:31+00:00","first_seen_at":"2026-11-10T22:27:29+00:00","fetched_at":"2026-11-10T22:27:29+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}