CVE-2025-9316

Description

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-131915
• https://me.n-able.com/s/security-advisory/aArVy0000000rdpKAA/cve20259316-ncentral-unauthenticated-sessionid-generation