N-able N-central before version 26.4.1 contains a vulnerability due to improper neutralization of HTTP headers, which allows Cross-Site Scripting (XSS) attacks. This vulnerability is identified as CVE-2026-125880 and has a high severity score of 8.3. It affects versions prior to 26.4.1 and requires user interaction with high privileges for exploitation.