CVE-2024-8510

5.3 mediumEPSS 0.4%

Medium (5.3) in n-able n-central. EPSS 0.4% chance of exploitation in the next 30 days.

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2025-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

n-able:n-central

References

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2024.6_Release_Notes.htm
https://me.n-able.com/s/security-advisory/aArVy0000000XgjKAE/cve20248510-ncentral-path-traversal

Check your stack JSON