CVE-2025-8875: N-able N-Central Insecure Deserialization Vulnerability
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
Other sources
N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
N-able N-centralto a version that resolves this vulnerability.Fixed in 2025.3.1 - Compensating control
Follow applicable BOD 22-01 guidance for cloud services.
- Compensating control
Discontinue use of the product if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8875?
CVE-2025-8875 is classified as a high severity vulnerability due to its potential for local code execution.
How do I fix CVE-2025-8875?
To fix CVE-2025-8875, upgrade N-able N-Central to version 2025.3.1 or later.
What type of vulnerability is CVE-2025-8875?
CVE-2025-8875 is a deserialization of untrusted data vulnerability.
What can attackers achieve with CVE-2025-8875?
Attackers can achieve local code execution through the exploitation of CVE-2025-8875.
Which versions of N-able N-Central are affected by CVE-2025-8875?
N-able N-Central versions before 2025.3.1 are affected by CVE-2025-8875.