CVE-2026-125882
Relative path traversal vulnerability in N-able N-central allows Path Traversal. This issue affects N-central: before 26.4.1.
CVSS
—
Sin CVSS
EPSS
0.5%
p46
KEV
—
Exploit Today
14
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-23
Sin historial EPSS suficiente todavía.
Relative path traversal vulnerability in N-able N-central allows Path Traversal. This issue affects N-central: before 26.4.1.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-120495——
——0Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the contents and location for the generated HTML log, leading to code execution as the site user.15hCVE-2026-1182135.9 MED58.8%
——18Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1138186.5 MED66.9%
——20Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.1dCVE-2026-1127628.8 ALT61.9%
——19Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.1dCVE-2026-1055057.8 ALT32.3%
——10Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.1dCVE-2026-1240346.4 MED41.7%
——13Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3 object keys.
We recommend you upgrade to amazon-braket-sdk version 1.127.7 or later.2d