PT-2025-33076 · N Able · N-Able N-Central

Published 2025-08-13 · Updated 2025-11-25 · CVE-2025-8876

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: N-able N-central versions prior to 2025.3.1

Description: Improper Input Validation in N-able N-central allows for OS Command Injection. This issue enables the execution of arbitrary operating system commands due to insufficient validation of user-supplied input.

Recommendations: Update N-able N-central to version 2025.3.1 or later.

Fix

OS Command Injection

RCE

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

CVE-2025-8876

Affected Products

N-Able N-Central

References · 48

• https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8876 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8876 · Security Note
• https://twitter.com/ScyScan/status/1955751496467014123 · Twitter Post
• https://twitter.com/SimoKohonen/status/1955938874636529680 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1957524091973361769 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1955981926310744531 · Twitter Post
• https://twitter.com/EduardKovacs/status/1955970243324428475 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1957147278591832562 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1mx2e0z/top_10_trending_cves_22082025 · Reddit Post
• https://t.me/cveNotify/132380 · Telegram Post
• https://reddit.com/r/Nable/comments/1nufvvq/detection_of_nable_possible_shadow_it · Reddit Post
• https://twitter.com/rxerium/status/1957147780440264823 · Twitter Post
• https://twitter.com/CVEnew/status/1956021895721033851 · Twitter Post
• https://t.me/cveNotify/140484 · Telegram Post