Skip to main content
CRITICAL

CVE-2024-28200

CVSS v3

9.8

CRITICAL

EPSS Score

1.9 %

exploit probability, as of 2026-10-04

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Technical details

Published
2024-07-01

Frequently asked questions

What is CVE-2024-28200?

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Is CVE-2024-28200 actively exploited?

Active exploitation of CVE-2024-28200 has not been confirmed. Its EPSS score was 1.9% on 2026-10-04, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2024-28200?

CVE-2024-28200 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2024-28200 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 50 free checks/month · Free API key