CVE-2025-11366: Critical Auth Bypass in N-able N-central
CVE-2025-11366 is a Critical path traversal auth bypass in N-able N-central before 2025.4. Upgrade to 2025.4 or later and confirm in the vendor advisory.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-11366 is a Critical path traversal auth bypass in N-able N-central before 2025.4. Upgrade to 2025.4 or later and confirm in the vendor advisory.
CVE-2025-11354 is a Medium unrestricted file upload flaw in code-projects Hotel Reservation 1.0. No fix is listed. Lock down uploads and restrict access.
CVE-2025-11350 is a High SQL injection in Campcodes Apartment Visitor 1.0. No fix is listed. Restrict access, use prepared statements, ask the vendor.
CVE-2025-11349 is a High SQL injection in Campcodes Apartment Visitor 1.0 via search-visitor.php. No fix is listed, so restrict access and fix the query.
CVE-2025-11348 is a High SQL injection in Campcodes Apartment Visitor 1.0 via index.php. No fix is listed. Restrict access and use prepared statements.
CVE-2025-11347 is a High unrestricted file upload flaw in code-projects Student CRUD 3.3. No fix is listed. Lock down uploads and restrict access.
CVE-2025-11346 is a Medium deserialization flaw in ILIAS reached via the f_settings argument. Upgrade to 8.24, 9.14 or 10.2 at minimum, ideally the latest.
CVE-2025-11345 is a Medium deserialization flaw in the ILIAS test import. Upgrade to 8.24, 9.14 or 10.2 or later, and check the ILIAS blog for newer fixes.
CVE-2025-11344 is a medium severity code execution flaw in ILIAS certificate import. Upgrade to 8.24, 9.14 or 10.2 and review its other security fixes.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.