CVE-2026-125883: Multiple XXE Vulnerabilities

Q: Which N-central deployments are affected?

N-able N-central versions before 26.4.1 are affected. The provided information does not identify any configuration prerequisite or excluded deployment type.

Q: What access does an attacker need to exploit this issue?

The severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required. The vulnerability is associated with XML external entity handling and XML Schema Poisoning.

Q: What version should be used to remediate the vulnerability?

Upgrade N-able N-central to version 26.4.1 or later. The issue affects versions before 26.4.1.

Published Nov 10, 2026

Updated

Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning.

This issue affects N-central: before 26.4.1.

Affected Software

1 affected component

N-able N-Central<26.4.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade N-able N-central to a version that resolves this vulnerability.
Fixed in 26.4.1

Event History

Nov 10, 2026

CVE Published

via MITRE·09:19 PM

Data Sourced

via MITRE·09:19 PM

DescriptionWeakness

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which N-central deployments are affected?

N-able N-central versions before 26.4.1 are affected. The provided information does not identify any configuration prerequisite or excluded deployment type.

What access does an attacker need to exploit this issue?

The severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required. The vulnerability is associated with XML external entity handling and XML Schema Poisoning.

What version should be used to remediate the vulnerability?

Upgrade N-able N-central to version 26.4.1 or later. The issue affects versions before 26.4.1.

CVE-2026-125883: Multiple XXE Vulnerabilities

Affected Software

Remediation

Event History

Frequently Asked Questions

Which N-central deployments are affected?

What access does an attacker need to exploit this issue?

What version should be used to remediate the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which N-central deployments are affected?

What access does an attacker need to exploit this issue?

What version should be used to remediate the vulnerability?