CVE-2026-125878

UNKNOWN NVD

CVSS Score 0

Severity UNKNOWN

Published Nov 10, 2026

Vendor unknown

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection. This issue affects N-central: before 26.4.1.

References

https://me.n-able.com/s/security-advisory/aArVy0000002ijJKAQ/cve2026125878-multiple-ognl-injection-vulnerabilities-lead-to-rce