PT-2025-46663 · Solarwinds · N-Central Software Probe

Published 2025-11-12 · Updated 2025-11-14 · CVE-2025-11367

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions N-central Software Probe versions prior to 2025.4

Description The N-central Software Probe is susceptible to Remote Code Execution through deserialization. No authentication is required for exploitation.

Recommendations Update to a version of N-central Software Probe 2025.4 or later.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-11367

Affected Products

N-Central Software Probe

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11367 · Security Note
• https://me.n-able.com/s/security-advisory/aArVy0000000rfRKAQ/cve202511367-ncentral-windows-software-probe-remote-code-execution · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11367 · Vendor Advisory
• https://twitter.com/CCBalert/status/1989235665079349463 · Twitter Post
• https://twitter.com/offseq/status/1988826976883245305 · Twitter Post
• https://twitter.com/0dayPublishing/status/1989199075787276628 · Twitter Post
• https://t.me/purp_sec/1280 · Telegram Post