XML External Entities Injection Vulnerability in N-central by N-able

CVE-2025-11700

What is CVE-2025-11700?

N-central versions earlier than 2025.4 are susceptible to an XML External Entities (XXE) injection, which can result in unauthorized information disclosure. This vulnerability allows attackers to exploit the application's ability to parse XML inputs, potentially leading to access to sensitive data. Proper validation and sanitization of XML data inputs can mitigate these risks, ensuring the security of the application.

References