What is GHSA-w636-q6pj-87mj?

GHSA-w636-q6pj-87mj is a security advisory published by GitHub Security Advisories with High severity. Download of code without integrity check vulnerability in N-able N-central allows Remote Code...

Which CVE IDs does GHSA-w636-q6pj-87mj cover?

GHSA-w636-q6pj-87mj covers the following CVE IDs: CVE-2026-125958. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-w636-q6pj-87mjHigh

Download of code without integrity check vulnerability in N-able N-central allows Remote Code...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-125958 →

📋 Description

Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion.

This issue affects N-central: through 24.6.1.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-125958
https://me.n-able.com/s/security-advisory/aArVy0000002ixpKAA/cve2026125958-root-rce-via-unsigned-nsp-upgrade-package-upload
https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able#preupgrade-helper-root-rce
https://github.com/advisories/GHSA-w636-q6pj-87mj