TRIADA
Back to live map

CVE-2025-8876

KEVN-able N-Central Command Injection Vulnerability
Description

N-able N-Central contains a command injection vulnerability via improper sanitization of user input.

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.

CVSS 4.0 vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PublishedAug 14, 2025
Last modifiedJun 17, 2026
Added to KEVAug 13, 2025
Remediation dueAug 20, 2025
References
0 recent articles mention this CVE
    77
    Risk assessment · High

    Actively exploited. Patch immediately.

    Exploitation
    Confirmed in the wild (CISA KEV)
    Federal remediation deadline
    Overdue by 432 days
    CVSS
    9.4 CRITICAL
    EPSS (30-day exploit probability)
    3.4% · top 11% of all CVEs
    Weakness
    CWE-20
    Attack vector
    Network, remotely reachable
    Recommended actions
    1. 1.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    2. 2.Treat as emergency change: patch or isolate internet-facing instances first.
    3. 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
    4. 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

    Assessment is derived automatically from the live signals above; verify against your own asset inventory.