{"id":"CVE-2026-125880","published":"2026-11-10T22:18:30.710","lastModified":"2026-11-10T22:18:30.710","description":"Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS).\n\nThis issue affects N-central: before 26.4.1.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-644"],"vendors":[],"products":[],"references":[{"url":"https://me.n-able.com/s/security-advisory/aArVy0000002imXKAQ/cve202612588-stored-xss-via-mms3-patch-metadata-admin-context","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}