CVE-2025-88759.4Critical
Insecure Deserialization Vulnerability
N-able · N-Central
Exploited in the wild · in CISA KEV since 13 Aug 2025Fixed in version 2025.3.1Exploitation attributed to Volt Typhoon (per Black Lotus Labs, The Hacker News)
1.9%probability of exploitation in the next 30 days
79th percentile
050100
Higher than 79% of scored CVEs
9.4CriticalCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 13 Aug · catalogue entry
Passed 433 days ago
DescriptionNVD
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CoverageNo articles yet
No CyberSIXT article names CVE-2025-8875 yet. New articles appear here and in the RSS feed.