PT-2025-46662 · Solarwinds · N-Central

Published 2025-11-12 · Updated 2025-11-14 · CVE-2025-11366

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4

Description N-central is susceptible to authentication bypass through a path traversal technique. This allows unauthorized access by exploiting a flaw in how the software handles file paths.

Recommendations Update to version 2025.4 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-11366

Affected Products

N-Central

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11366 · Security Note
• https://me.n-able.com/s/security-advisory/aArVy0000000rcDKAQ/cve202511366-ncentral-authentication-bypass-via-path-traversal · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11366 · Vendor Advisory
• https://twitter.com/CCBalert/status/1989235665079349463 · Twitter Post
• https://t.me/purp_sec/1280 · Telegram Post
• https://twitter.com/offseq/status/1988849634542854566 · Twitter Post
• https://twitter.com/CVEnew/status/1988721729435275752 · Twitter Post