CVE-2025-8875

CVSS: 9.4 Critical
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Risk score: 100.0
Known exploited: CISA KEV
Published: 2025-08-14
Status: Published

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

Weaknesses

CWE-502

Coverage 2

threat-intel

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability in N-able N-central to its KEV catalog due to active exploitation. This flaw, stemming from incomplete patching of…

The Hacker News · Aug 4, 2026 High

CVE-2026-18577 CVE-2026-18556 CVE-2025-8875 GE IC SW vulnerability remote monitoring remote management

vulnerability

N‑able Patches Vulnerability Exploited to Hack N-central Servers

A vulnerability in N-able's N-central remote monitoring and management product has been actively exploited in the wild, allowing attackers to gain administrative access to customer servers. The issue stems from a bypass…

SecurityWeek · Aug 3, 2026 High

CVE-2026-18577 CVE-2026-18556 CVE-2025-8875 patch remote management msp

All articles mentioning it

news.mlab.sh

CVE-2025-8875

Weaknesses

Coverage 2

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

N‑able Patches Vulnerability Exploited to Hack N-central Servers

Advisories and references