Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2025-11700

HighPublished

N-central Multiple XXE Injection Vulnerabilities

Published: Nov 12, 2025
Updated: Dec 15, 2025
Assigning CNA: N-able
Evidence observed: Aug 8, 2026

Primary CVSS

8.4/ 10High

nvd · CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS probability estimate

30.7%

Moderate · next 30 days

Percentile: 98.2%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

Sources

n-able_n-central_xxe_file_readExploit
Proof of concept exploit for N-able N-central to chain CVE-2025-9316 and CVE-2025-11700 to read files
CVE-2025-9316_CVE-2025-11700Exploit
Exploit code for CVE-2025-9316 and CVE-2025-11700, providing proof-of-concept or automated exploitation for these specific vulnerabilities.

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.