Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2025-9316

MediumPublished

N-central unauthenticated sessionID generation

Published: Nov 12, 2025
Updated: Nov 12, 2025
Assigning CNA: N-able
Evidence observed: Aug 8, 2026

Primary CVSS

6.9/ 10Medium

nvd · CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS probability estimate

36.3%

Moderate · next 30 days

Percentile: 98.5%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

Sources

n-able_n-central_xxe_file_readExploit
Proof of concept exploit for N-able N-central to chain CVE-2025-9316 and CVE-2025-11700 to read files
CVE-2025-9316_CVE-2025-11700Exploit
Exploit code for CVE-2025-9316 and CVE-2025-11700, providing proof-of-concept or automated exploitation for these specific vulnerabilities.

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.