Trending
CVE-2025-8875

CVE detail

CVE-2025-8875

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

CVSS 9.4 · CriticalBuzz score 60.3KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 60.3

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 20.8 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0

Mention score

20.8

7 evidence mentions in the snapshot

Diversity score

14.5

5 sources across 2 categories

KEV score

25.0

Known exploited vulnerability present

OTX score

0.0

0 OTX pulses

PoC score

0.0

0 repos · best confidence N/A

Best PoC traction

Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions: 0; within the 30d window
Peak daily: 0; highest bucket

Evidence

Source links by recency

Newest mentions first

7 source links · newest first

N-able N-central: From N-days to 0-daysHorizon3.ai
Horizon3.ai discovered two critical vulnerabilities in N-able N-central — CVE-2025-9316 and CVE-2025-11700 — that can be chained to leak credentials and fully compromise the appliance. This in-depth analysis details how the flaws were found, exploited, responsibly disclosed, and patched in version 2025.4, turning N-days into true 0-days.
exploithorizon3.aiNov 17, 2025, 6:39 PM
Critical N-central RMM flaws actively exploited in the wildCSO Online
Users of remote monitoring and management (RMM) solution N-able N-central are urged to deploy patches for two critical vulnerabilities that are being actively exploited in the wild. Frequently a target for attackers, RMM software is used by managed service providers (MSPs) and enterprises to monitor workstations, servers, mobile devices, and networking equipment. The two N-central […]
newswww.csoonline.comAug 21, 2025, 5:50 PM
Hundreds of N-able N-central Instances Affected by Exploited VulnerabilitiesSecurityWeek
More than 870 N-able N-central instances have not been patched against CVE-2025-8875 and CVE-2025-8876, two exploited vulnerabilities.
newswww.securityweek.comAug 18, 2025, 12:17 PM
Week in review: 2 threat actors exploiting WinRAR 0-day, Microsoft fixes “BadSuccessor” Kerberos flawHelp Net Security
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: WinRAR zero-day was exploited by two threat actors (CVE-2025-8088) The RomCom attackers aren’t the only ones that have been leveraging the newly unveiled WinRAR vulnerability (CVE-2025-8088) in zero-day attacks: according to Russian cybersecurity company BI.ZONE, a group tracked as Paper Werewolf has been using it to target Russian organizations. Microsoft fixes “BadSuccessor” Kerberos vulnerability (CVE-2025-53779) For August 2025 Patch Tuesday, … More →
newswww.helpnetsecurity.comAug 17, 2025, 8:00 AM
CISA Warns of Attacks Exploiting N-able VulnerabilitiesSecurityWeek
CISA reported becoming aware of attacks exploiting CVE-2025-8875 and CVE-2025-8876 in N-able N-central on the day they were patched.
newswww.securityweek.comAug 14, 2025, 12:29 PM
Vulnerabilities in MSP-friendly RMM solution exploited in the wild (CVE-2025-8875, CVE-2025-8876)Help Net Security
Two vulnerabilities (CVE-2025-8875, CVE-2025-8876) in N-central, a remote monitoring and management (RMM) solution by N-able that’s popular with managed service providers, are being exploited by attackers. There are no public reports of exploitation, but the confirmation came from the US Cybersecurity and Infrastructure Security Agency (CISA), which added the flaws to its Known Exploited Vulnerabilities catalog and ordered US federal civilian agencies to mitigate them within a week. About the vulnerabilities (CVE-2025-8875, CVE-2025-8876) N-able N-central … More →
newswww.helpnetsecurity.comAug 14, 2025, 10:25 AM
U.S. CISA adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added N-able N-Central flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: N-able N-central is an Remote Monitoring and Management (RMM) platform for MSPs to […]
newssecurityaffairs.comAug 14, 2025, 8:02 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars

No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence

CVE-2025-11367
The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
CVSS 10.0 · Critical
2 mentions
CVE-2026-69659
Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions with…
CVSS 5.9 · Medium
4 mentions
CVE-2026-68772
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute…
CVSS 8.5 · High
4 mentions
CVE-2026-71560
Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing ta…
CVSS 9.1 · Critical
2 mentions
CVE-2026-71559
Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malfor…
CVSS 7.5 · High
2 mentions
CVE-2026-71558
Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass typ…
CVSS 9.8 · Critical
2 mentions

External lookup

Potential internet exposure

Potential exposure only — not proof of vulnerability.Shodan results indicate potentially internet-exposed products, not confirmed vulnerable systems. They do not confirm that any returned system is vulnerable to CVE-2025-8875.

Product-level CPE searches intentionally omit version fields and NVD version-range or configuration certainty. Verify the exact product version and configuration independently.

Sign-in required. Shodan requires you to sign in to run these filter searches.

Product CPE queries

Derived from this CVE's existing NVD CPE 2.3 records; the application, operating-system, or hardware part is retained.

cpe:2.3:a:n-able:n-centralSearch this product on Shodan

Exact CVE query

Eligible paid Shodan plan required

Shodan's exact vuln: filter is separate from the product searches above and requires an eligible paid Shodan plan.

vuln:CVE-2025-8875Search this CVE on Shodan

These are outbound search links only. cvebuzz makes no Shodan API call, uses no Shodan API key, and does not display live result counts.

Metadata

Canonical fields

NVD status

Unavailable

Published

Aug 14, 2025

Modified

Jun 17, 2026

Official record

Authoritative NVD record

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE IDs

Vendor classifications

How this vector reads

CVSS 4.0 base metrics decoded below. This explanation does not recalculate or change the NVD score.

Attack Vector (AV): Network. The vulnerable system can be reached across network boundaries.
Attack Complexity (AC): Low. No special conditions beyond the attacker-controlled steps are required.
Attack Requirements (AT): None. No prerequisite deployment or execution condition is required.
Privileges Required (PR): Low. The attacker needs basic user-level privileges.
User Interaction (UI): None. Exploitation does not require a targeted user to act.
Vulnerable System Confidentiality (VC): High. There is a total or serious impact to this security property.
Vulnerable System Integrity (VI): High. There is a total or serious impact to this security property.
Vulnerable System Availability (VA): High. There is a total or serious impact to this security property.
Subsequent System Confidentiality (SC): High. There is a total or serious impact to this security property.
Subsequent System Integrity (SI): High. There is a total or serious impact to this security property.
Subsequent System Availability (SA): High. There is a total or serious impact to this security property.

Optional CVSS v4 metrics remain in the raw vector; only base metrics are expanded here.

Signals

Exploitation indicators

1 stored signals · KEV present · 0 OTX pulses

KEVKEV
- cwes:
- dueDate: 2025-08-20
- knownRansomwareCampaignUse: Unknown
- notes: https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-8875
- product: N-Central
- requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- shortDescription: N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.
- vendorProject: N-able
- vulnerabilityName: N-able N-Central Insecure Deserialization Vulnerability
Observed Aug 13, 2025, 12:00 AM