CVE-2025-8876

N-able N-Central Command Injection Vulnerability
4.1%
EPSS
91%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

N-able N-Central contains a command injection vulnerability via improper sanitization of user input.

Vendor
N-able
Product
N-Central
Added to KEV
Aug 13, 2025
Remediation due
Aug 20, 2025 (US federal deadline)
Ransomware use
Not known
EPSS
4.1% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded