---
id: "CVE-2026-125958"
page: "https://infrastack.ai/live/CVE-2026-125958"
kind: "vulnerability"
aliases: ["CVE-2026-125958"]
title: "N-able N-central: downloaded code runs without integrity check"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "N-central", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["msp", "n-able", "n-central", "self-hosted", "vendor"]
not_affected_if: ["newer-version"]
published_at: "2026-11-10T22:18:31+00:00"
first_seen_at: "2026-11-10T22:27:29+00:00"
updated_at: "2026-11-10T22:29:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125958", "first_seen_at": "2026-11-10T22:27:29+00:00"}]
exploit_sources: []
---

# N-able N-central: downloaded code runs without integrity check

Link for people: https://infrastack.ai/live/CVE-2026-125958 (this .md is for agents)

N-able N-central downloads code without verifying its integrity, so an attacker who can alter that download can get their code included and run. The sources state that versions through 24.6.1 are affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:N-central affected range not listed fixed no fixed version listed

## How to check

- Check the installed N-central version against `24.6.1` or earlier in the N-central admin console.

## Fix

- Move N-central past `24.6.1`; the sources do not name the fixed version.

## Timeline

- 2026-11-10T22:27:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125958

## From the sources

Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion.

This issue affects N-central: through 24.6.1.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_