CVE-2026-125879: Local privilege escalation to root via nable-writable syslog-ng config

Q: Which deployments are affected?

N-able N-central versions before 26.4.1 are affected. The provided data does not identify any unaffected configuration or deployment role within those versions.

Q: What level of access does an attacker need?

The CVSS vector indicates that the attacker needs high privileges before exploitation (PR:H). The issue is described as a local privilege escalation to root, rather than an unauthenticated remote attack.

Q: What is the impact of successful exploitation?

Successful exploitation can elevate privileges to root. The CVSS metrics indicate high impact to confidentiality and integrity and low impact to availability.

Published Nov 10, 2026

Updated

Incorrect privilege assignment vulnerability in N-able N-central allows Privilege Escalation.

This issue affects N-central: before 26.4.1.

Affected Software

1 affected component

N-able N-Central<26.4.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade N-able N-central to a version that resolves this vulnerability.
Fixed in 26.4.1

Event History

Nov 10, 2026

CVE Published

via MITRE·09:23 PM

Data Sourced

via MITRE·09:23 PM

DescriptionWeakness

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

N-able N-central versions before 26.4.1 are affected. The provided data does not identify any unaffected configuration or deployment role within those versions.

What level of access does an attacker need?

The CVSS vector indicates that the attacker needs high privileges before exploitation (PR:H). The issue is described as a local privilege escalation to root, rather than an unauthenticated remote attack.

What is the impact of successful exploitation?

Successful exploitation can elevate privileges to root. The CVSS metrics indicate high impact to confidentiality and integrity and low impact to availability.

CVE-2026-125879: Local privilege escalation to root via nable-writable syslog-ng config

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What level of access does an attacker need?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What level of access does an attacker need?

What is the impact of successful exploitation?