CVE-2025-8875 N-able N-Central Insecure Deserialization
An insecure deserialization flaw in N-able N-central allows local attackers to execute arbitrary code, requiring an upgrade to the latest version.
- Exploited in the wild
- Since 13 Aug 2025
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8875?
CVE-2025-8875 is a critical unsafe deserialization vulnerability in N-able N-central, published on 14 Aug 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
Weakness: CWE-502
Which versions are affected by CVE-2025-8875?
It affects 1 product.
Products include N-Able N-Central.
How do I fix CVE-2025-8875?
No fix has been published for CVE-2025-8875 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 20 Aug 2025.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2025-8875 being exploited?
Yes. Attackers have exploited CVE-2025-8875 in the wild since at least 13 Aug 2025.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in N-able N-central
- CVE-2026-86218 N-able N-central Static Code Injection
- CVE-2025-8876 N-able N-Central Command Injection
- CVE-2026-18577 N-able N-central Authentication Bypass Using an Alternate Path or Channel
- CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel
- CVE-2025-11367 N-central windows software probe Remote Code Execution
Sources
Also known as GHSA-rhqj-c64h-w74r.