CVE-2026-125880

— UNSCORED

Published 2026-11-10 · Updated 2026-11-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS). This issue affects N-central: before 26.4.1.

Weaknesses

CWE-644

All references

https://me.n-able.com/s/security-advisory/aArVy0000002imXKAQ/cve202612588-stored-xss-via-mms3-patch-metadata-admin-context

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-0516
HIGHCVE-2026-110723PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.