CVE-2026-125882: RCE via file repository upload path traversal

Q: Which deployments need remediation?

N-able N-central versions before 26.4.1 are affected. The provided data does not identify any unaffected configuration or deployment type within that version range.

Q: What level of access does an attacker need?

The CVSS vector indicates high privileges are required (PR:H). Exploitation is network-accessible and does not require user interaction or additional attack conditions.

Q: What is the expected impact if exploited?

The vulnerability is described as RCE via a file repository upload path traversal. The CVSS vector indicates high impact to confidentiality and integrity, and low impact to availability.

Published Nov 10, 2026

Updated

Relative path traversal vulnerability in N-able N-central allows Path Traversal.

This issue affects N-central: before 26.4.1.

Affected Software

1 affected component

N-able N-Central<26.4.1

Event History

Nov 10, 2026

CVE Published

via MITRE·09:25 PM

Data Sourced

via MITRE·09:25 PM

DescriptionWeakness

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments need remediation?

N-able N-central versions before 26.4.1 are affected. The provided data does not identify any unaffected configuration or deployment type within that version range.

What level of access does an attacker need?

The CVSS vector indicates high privileges are required (PR:H). Exploitation is network-accessible and does not require user interaction or additional attack conditions.

What is the expected impact if exploited?

The vulnerability is described as RCE via a file repository upload path traversal. The CVSS vector indicates high impact to confidentiality and integrity, and low impact to availability.

CVE-2026-125882: RCE via file repository upload path traversal

Affected Software

Event History

Frequently Asked Questions

Which deployments need remediation?

What level of access does an attacker need?

What is the expected impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Which deployments need remediation?

What level of access does an attacker need?

What is the expected impact if exploited?