Which products and versions are affected by CVE-2025-9316?

Affected: N-central. The full list is in the CVE brief.

Is CVE-2025-9316 being exploited in the wild?

It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Dec 15, 2025.

Is CVE-2025-9316 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2025-9316?

No public exploit code is known.

Is there a fix for CVE-2025-9316?

Fixed versions are available, including N-central 2025.4.

How urgently should CVE-2025-9316 be patched?

Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Request A Demo

On CISA KEVMedium

CVE-2025-9316N-central Vulnerability

Q: What is CVE-2025-9316?

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

N-central < 2025.4 can generate sessionIDs for unauthenticated users

Published Nov 12, 2025 · Updated Oct 23, 2026

Key Facts

Patch immediately

CVE-2025-9316 is a medium-severity vulnerability (CVSS 6.9 v4) affecting N-central.
It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Dec 15, 2025. No public exploit code is known.
EPSS estimates a 37% probability of exploitation in the next 30 days.
Fixed versions are available, including N-central 2025.4.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Scores

CVSS v4

6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (30-day exploit likelihood)

37%

Higher than 98.5% of all scored CVEs

Exploit maturity

Exploited (KEV)

ATLAS score

43/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Dec 15, 2025

33 days after publication

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Exploited (KEV)

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Description

N-central < 2025.4 can generate sessionIDs for unauthenticated users

This issue affects N-central: before 2025.4.

Known-Exploited Catalog Listings

Catalog	Added	Remediation due	Ransomware use
CIRCL KEV	Dec 15, 2025	n/a	Not reported
Industry KEV feed	Dec 15, 2025	n/a	Not reported

Affected Products

1 affected entries in total

Product	Affected versions	Fixed in
N-central	See advisory	2025.4

Patched Releases

N-central

2025.4

Timeline

Publicly disclosed
Nov 12, 2025
Added to CIRCL KEV
Dec 15, 2025
Added to Industry KEV feed
Dec 15, 2025
Last updated
Oct 23, 2026

Weakness Type

CWE-1284 Improper Validation of Specified Quantity in Input

References

6 more references in the full CVE brief

FAQ

Common Questions.

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.
Affected: N-central. The full list is in the CVE brief.
It is exploited in the wild, listed in CIRCL KEV, Industry KEV feed since Dec 15, 2025.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including N-central 2025.4.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.

Is CVE-2025-9316 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.