N-able N-central before version 26.4.1 contains an XML external entity (XXE) vulnerability that allows XML Schema Poisoning. This vulnerability is classified under CWE-611 and has a critical CVSS 4.0 score of 9.3. It enables attackers to exploit improper restrictions on XML external entity references.