CVE-2025-8876 CISA KEV · Actively exploited
Improper input validation in N Able N Central
CVSS score
8.8
EPSS probability
%3.4
Risk score
0.6
Published
1 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows
Similar Vulnerabilities
9.8
CVE-2026-86218 Actively exploitedVulnerability in N Able N Central
Patch status unknown Public Exploits:7EPSS %13
8.2
CVE-2026-18577 Actively exploitedIncomplete patch leads to administrative account takeover
Patch verified Public Exploits:2EPSS %15
7.5
CVE-2025-11700XML external entity injection in N Able N Central
Patch status unknown Public Exploits:1EPSS %32
7.8
CVE-2025-8875 Actively exploitedDeserialization of untrusted data in N Able N Central
Workaround Public Exploits:1EPSS %2
9.8
CVE-2025-11367Deserialization of untrusted data in N Able N Central
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-8876"