CVE-2024-8510

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Customer data is not exposed. This vulnerability is present in all deployments of N-central prior to N-central 2024.6.

• CWE-22
• CWE-23

• https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2024.6_Release_Notes.htmRelease Notes
• https://me.n-able.com/s/security-advisory/aArVy0000000XgjKAE/cve20248510-ncentral-path-traversalVendor Advisory

Published

Mar 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8504An attacker with authenticated access to VICIdial as an "age…8.8
• CVE-2024-8505The WordPress Infinite Scroll – Ajax Load More plugin for Wo…5.4
• CVE-2024-8506Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-8507The File Manager Pro plugin for WordPress is vulnerable to C…8.8
• CVE-2024-8508NLnet Labs Unbound up to and including version 1.21.0 contai…5.3
• CVE-2024-8509A vulnerability was found in Forklift Controller.  There is …7.5
• CVE-2024-8512The W3SPEEDSTER plugin for WordPress is vulnerable to Remote…9.1
• CVE-2024-8513The QA Analytics – Web Analytics Tool with Heatmaps & Sessio…5.3
• CVE-2024-8514The Prisna GWT – Google Website Translator plugin for WordPr…7.2
• CVE-2024-8515The Themesflat Addons For Elementor plugin for WordPress is …5.4
• CVE-2024-8516The Themesflat Addons For Elementor plugin for WordPress is …4.3
• CVE-2024-8517SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a co…9.8