CVE-2025-8876

🗓️ 14 Aug 2025 14:53:55Reported by N-ableType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 30 Views

CVE-2025-8876: Improper input validation in N-central enables OS command injection; pre2025.3.1.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2025-8876	13 Aug 202520:00	–	circl
CISA KEV Catalog	N-able N-Central Command Injection Vulnerability	13 Aug 202500:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	13 Aug 202512:00	–	cisa
CNNVD	N-able N-central 操作系统命令注入漏洞	14 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-8876 Command Injection Vulnerability	14 Aug 202514:53	–	cvelist
GithubExploit	Exploit for Deserialization of Untrusted Data in N-Able N-Central	17 Aug 202517:56	–	githubexploit
EUVD	EUVD-2025-24822	14 Aug 202514:53	–	euvd
NCSC	Vulnerabilities fixed in N-able N-Central	14 Aug 202512:38	–	ncsc
NVD	CVE-2025-8876	14 Aug 202515:15	–	nvd
Tenable Nessus	N-able N-central < 2024.6 HF2 / 2025.x < 2025.3.1 Multiple Vulnerabilities	15 Aug 202500:00	–	nessus

NVD

Node

n-able n-centralRange<2025.3.1

[
  {
    "defaultStatus": "unaffected",
    "product": "N-central",
    "vendor": "N-able",
    "versions": [
      {
        "lessThan": "2025.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "<="
      }
    ]
  }
]