CVE

CVE-2024-28200

9.1

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

n-central

Updated Nov 10, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

N-able N-central < 2024.2 - Authentication Bypass Detection

N-central server versions prior to 2024.2 contain an authentication bypass in the user interface, letting attackers access restricted areas without proper credentials, exploit requires no specific conditions. References: https://status.n-able.com/2024/07/02/n-central-critical-security-fix-details/ https://me.n-able.com/s/security-advisory/aArVy0000000673KAA/cve202428200-ncentral-authentication-bypass https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2024-28200 https://nvd.nist.gov/vuln/detail/CVE-2024-28200 Remediation: Update to version 2024.2 or later.

url

Scanner page →Run scanner

CVE history: n-central

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →