ACTIEF MISBRUIKT
CVE-2025-8876: N-able N-Central Command Injection Vulnerability
| Leverancier | N-able |
|---|---|
| Product | N-Central |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 13 aug 2025 |
| CISA-deadline (Amerikaanse overheid) | 20 aug 2025 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
N-able N-Central contains a command injection vulnerability via improper sanitization of user input.
BRONNEN
Andere lekken bij N-able
- CVE-2026-86218: N-able N-central Static Code Injection Vulnerability
- CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2025-8875: N-able N-Central Insecure Deserialization Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.