Session ID Generation Vulnerability in N-central by N-able

CVE-2025-9316

What is CVE-2025-9316?

An issue in N-central prior to version 2025.4 allows for the generation of session IDs for unauthenticated users. This creates a security risk, as malicious actors could exploit this flaw to gain unauthorized access to sensitive user sessions, potentially compromising user data and system integrity. It is essential for users of N-central to upgrade to version 2025.4 or later to mitigate this vulnerability and protect their systems.

References