CVE-2025-9316CWE-1284

CVE-2025-9316

published November 12, 2025

CVSS
6.9
EPSS
37%
Percentile
98.5
In the wild
Unconfirmed
What it is

N-central < 2025.4 can generate sessionIDs for unauthenticated users

This issue affects N-central: before 2025.4.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.37387 · 98.5th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2025-11-12T21:15Z
References (1)
https://me.n-able.com/s/security-advisory/aArVy0000000rdpKAA/cve20259316-ncentral-unauthenticated-sessionid-generation · a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
EPSS history
Timeline
  • 12 NOV 15:27Z
    N-central unauthenticated sessionID generation
    cvelistv5