Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Aug 20, 2025

CVE-2025-8876

High
EPSS 7.8%CISA KEV
N-able/N-Central

Description

N-able N-Central contains a command injection vulnerability via improper sanitization of user input.

EPSS — Exploit Probability

7.8%

Higher than 91.9% of all CVEs

Required Action

https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-8876

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
7.8%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Aug 13, 2025

Added to KEV

Aug 13, 2025

Remediation Due

Aug 20, 2025

Affected Product

N-able

N-Central

View all N-able CVEs