CVE-2025-11700Active Exploitation(n-able / n-central)

LOWCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for n-able n-central systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

n-able CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

https://me.n-able.com/s/security-advisory/aArVy0000000rabKAA

Weakness type (CWE)

CWE-611

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

n-central

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

n-able

Products

n-central

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

http://ctiwatch.cloud/alerts

Full discourse1 post

CTIWatch@ctiwatchcloud178d
Active Exploitation
🚨 [HIGH] Active exploitation detected: CVE-2025-11700 Exploit in the wild confirmed for CVE-2025-11700 (CVSS null). N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection l... 🔗 http://ctiwatch.cloud/alerts #ZeroDay #ExploitInWild #CyberSecurity
Post summary
The post reports that CVE‑2025‑11700 is being actively exploited in the wild, targeting N‑central versions prior to 2025.4 via XML External Entities injection, with no patch or workaround mentioned.
00000204
5.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	n-able	n-central	-	-	-

Explore more

Back to dashboard n-able CVEs n-central vulnerabilities