CVE-2025-8875 CISA KEV · Actively exploited
Deserialization of untrusted data in N Able N Central
CVSS score
7.8
EPSS probability
%1.9
Risk score
0.3
Published
1 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows
Similar Vulnerabilities
9.8
CVE-2026-86218 Actively exploitedVulnerability in N Able N Central
Patch status unknown Public Exploits:7EPSS %13
8.2
CVE-2026-18577 Actively exploitedIncomplete patch leads to administrative account takeover
Patch verified Public Exploits:2EPSS %15
7.5
CVE-2025-11700XML external entity injection in N Able N Central
Patch status unknown Public Exploits:1EPSS %32
8.8
CVE-2025-8876 Actively exploitedImproper input validation in N Able N Central
Patch status unknown Public Exploits:1EPSS %3
9.8
CVE-2025-11367Deserialization of untrusted data in N Able N Central
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-8875"