CVE-2025-11367CWE-502insecure-deserialization

CVE-2025-11367

Critical · published November 12, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

🚨 A single deserialization flaw in N-central Software Probe versions prior to 2025.4 opens the door wide for remote code execution — that’s like leaving your front door unlocked with a neon sign saying ‘welcome’! 🔥 Think of it like a restaurant kitchen that accepts any order without checking the original receipt. If a rogue chef sends a wild order, the kitchen could serve up anything — even a dish with a side of malware! This vulnerability allows an attacker to execute arbitrary code on the server. The consequences could be absolutely devastating, including unauthorized access to sensitive data, system manipulation, or even complete control over the affected systems. This is a hacker's playground — a critical breach just waiting to happen!

Put simply

Think of it like a restaurant kitchen that accepts any order without checking the original receipt. If a rogue chef sends a wild order, the kitchen could serve up anything — even a dish with a side of malware! The N-central Software Probe has a deserialization vulnerability that can be exploited by an attacker to execute arbitrary code on the server. This happens because the software fails to verify the integrity of the data being deserialized, allowing malicious inputs to run dangerous commands.

What to do

This vulnerability allows an attacker to execute arbitrary code on the server. The consequences could be absolutely devastating, including unauthorized access to sensitive data, system manipulation, or even complete control over the affected systems. This is a hacker's playground — a critical breach just waiting to happen! Immediately upgrade N-central Software Probe to version 2025.4 or later to eliminate this vulnerability. Conduct a thorough audit of your configurations and ensure that proper input validation measures are in place. Don't forget to test your systems after the upgrade! You've got this! By taking these steps, you're on your way to locking down that door and keeping the bad guys out. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00627 · 49.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-11-12T21:15Z
Affected products (1)
ProductVersionsFixed in
n-able/n-central< 2025.42025.4
References (1)
EPSS history
Timeline
  • 12 NOV 15:34Z
    N-central windows software probe Remote Code Execution
    cvelistv5