{"id":"CVE-2026-125878","published":"2026-11-10T22:18:30.380","lastModified":"2026-11-10T22:18:30.380","description":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central allows Resource Injection.\n\nThis issue affects N-central: before 26.4.1.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://me.n-able.com/s/security-advisory/aArVy0000002ijJKAQ/cve2026125878-multiple-ognl-injection-vulnerabilities-lead-to-rce","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}