|
1 | 1 | { |
2 | 2 | "title": "CISA Catalog of Known Exploited Vulnerabilities", |
3 | | - "catalogVersion": "2025.08.12", |
4 | | - "dateReleased": "2025-08-12T17:01:51.5879Z", |
5 | | - "count": 1397, |
| 3 | + "catalogVersion": "2025.08.13", |
| 4 | + "dateReleased": "2025-08-13T19:43:38.9296Z", |
| 5 | + "count": 1399, |
6 | 6 | "vulnerabilities": [ |
| 7 | + { |
| 8 | + "cveID": "CVE-2025-8876", |
| 9 | + "vendorProject": "N-able", |
| 10 | + "product": "N-Central", |
| 11 | + "vulnerabilityName": "N-able N-Central Command Injection Vulnerability", |
| 12 | + "dateAdded": "2025-08-13", |
| 13 | + "shortDescription": "N-able N-Central contains a command injection vulnerability via improper sanitization of user input.", |
| 14 | + "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", |
| 15 | + "dueDate": "2025-08-20", |
| 16 | + "knownRansomwareCampaignUse": "Unknown", |
| 17 | + "notes": "https:\/\/status.n-able.com\/2025\/08\/13\/announcing-the-ga-of-n-central-2025-3-1\/ ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-8876", |
| 18 | + "cwes": [] |
| 19 | + }, |
| 20 | + { |
| 21 | + "cveID": "CVE-2025-8875", |
| 22 | + "vendorProject": "N-able", |
| 23 | + "product": "N-Central", |
| 24 | + "vulnerabilityName": "N-able N-Central Insecure Deserialization Vulnerability", |
| 25 | + "dateAdded": "2025-08-13", |
| 26 | + "shortDescription": "N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.", |
| 27 | + "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", |
| 28 | + "dueDate": "2025-08-20", |
| 29 | + "knownRansomwareCampaignUse": "Unknown", |
| 30 | + "notes": "https:\/\/status.n-able.com\/2025\/08\/13\/announcing-the-ga-of-n-central-2025-3-1\/ ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-8875", |
| 31 | + "cwes": [] |
| 32 | + }, |
7 | 33 | { |
8 | 34 | "cveID": "CVE-2025-8088", |
9 | 35 | "vendorProject": "RARLAB", |
|
0 commit comments