CISA Warns of Active Exploits in N-able N-central, Urges Upgrade to 2025.3.1

CISA added two high-risk N-able N-central vulnerabilities (CVE-2025-8875 insecure deserialization and CVE-2025-8876 command injection) to its Known Exploited Vulnerabilities catalog; N-able released version 2025.3.1 to address them and urges immediate upgrade, enforcement of MFA, and monitoring via expanded audit logs, as both flaws can enable authenticated attackers to execute arbitrary code or commands and are being actively exploited.