Cyber Security News

CISA warns of N-able N-central flaws exploited in zero-day attacks

BleepingComputer
CISA warns of N-able N-central flaws exploited in zero-day attacks

CISA has issued a warning about active exploitation of two vulnerabilities in N-able’s N-central RMM platform, primarily affecting managed service providers and IT departments. Organizations are urged to update to version 2025.3.1 to mitigate risks, with some instances already exposed online. #Nable #CVE20255875 #CVE20255876

Keypoints

  • CISA warns of active exploitation of two security flaws in N-able’s N-central platform.
  • The vulnerabilities allow command execution and input injection attacks with limited required permissions.
  • N-able released a security patch in version 2025.3.1, urging users to upgrade promptly.
  • Approximately 2,000 N-central instances are exposed online, mainly in the US, Australia, and Germany.
  • Federal agencies must patch these vulnerabilities within one week under CISA’s directives.

Read More: https://www.bleepingcomputer.com/news/security/cisa-warns-of-n-able-n-central-flaws-exploited-in-zero-day-attacks/