Actively exploited in the wild
N-able N-Central Command Injection Vulnerability
N-able - N-Central · Listed in the CISA KEV since 2025-08-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-8876
HighCVSS 8.8KEVSummary
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection. This issue affects N-central before 2025.3.1.
Risk Assessment
An attacker can inject and execute operating system commands, potentially leading to compromise of the management server. The risk is high due to the critical role of N-central in infrastructure management.
Recommendation
Update N-able N-central to version 2025.3.1 or later as soon as possible. Also review logs for attempts to exploit the vulnerability.
Other vulnerabilities in N-able N-central
See all- CVE-2026-18556HighActively exploited
Authentication bypass using an alternate path or channel vulnerability in N-able N-central through version 2026.1 allows authentication bypass.
- CVE-2025-8875HighActively exploited
Deserialization of untrusted data vulnerability in N-able N-central allows local code execution. Affects versions before 2025.3.1.
Original NVD description (English source)
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.