The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning amidst adding two (2) actively exploited flaws in N-able’s N-central Remote Monitoring and Management (RMM) platform to its Known Exploited Vulnerabilities (KEV) catalog. The first vulnerability, tracked as CVE-2025-8875, is an insecure deserialization vulnerability. The second flaw, tracked as CVE-2025-8876, is a command injection flaw caused by improper input sanitization. Both require authentication to exploit but could allow attackers to execute commands on affected systems. N-able has patched the issues in N-central versions 2025.3.1 and 2024.6 HF2, released August 13, 2025, and urges customers to upgrade immediately, enable multi-factor authentication (particularly for admin accounts), and secure their environments before full technical details are published. While there is no current evidence linking these exploits to ransomware, Shodan data indicates roughly 2,000 N-central instances are exposed online, primarily in the U.S., Australia, and Germany. Federal Civilian Executive Branch (FCEB) agencies are mandated to patch by no later than August 20, 2025, under Binding Operational Directive 22-01, and CTIX analysts strongly encourage all organizations to do the same to mitigate the significant security risks posed by these vulnerabilities.