# Critical vulnerabilities in N-able N-central prompt hosted shutdown

Source: [Rapid7 Cybersecurity Blog](https://www.rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown) · 2026-11-10 · Security
Page: https://themorning.dev/story/critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown-16c64913506b4d36
Kind: security · Impact: high

## In brief

- N-able has taken N-central Hosted Environments offline and urged on-premises customers to shut down their servers until further notice.
- A researcher publicly disclosed over 30 vulnerabilities, tracked as Able2Shell, with PoC exploits.
- Sources say attackers could exploit the flaws for remote code execution, credential theft, and administrator account creation.

## Why it matters

N-central is a remote monitoring and management (RMM) platform, so a compromise can reach the systems it manages. Developers and IT teams running N-central need to act on N-able's guidance now.

## What to do

- Shut down on-premises N-central servers as N-able advises, until N-able announces otherwise

## Timeline

- 2026-11-09: N-able announced it was responding to the public disclosure of Able2Shell and took N-central Hosted Environments offline

## Coverage

- [Critical vulnerabilities in N-able N-central prompt hosted shutdown](https://www.rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown) — Rapid7 Cybersecurity Blog, 2026-11-10
- [N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days](https://www.securityweek.com/n-able-takes-n-central-offline-as-researcher-drops-over-30-zero-days/) — SecurityWeek, 2026-11-10
- [N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits](https://thehackernews.com/2026/11/n-able-takes-hosted-n-central-offline.html) — The Hacker News, 2026-11-10
- [N-able takes cloud platform offline after 30+ "zero-days" published](https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/) — BleepingComputer, 2026-11-09

Tags: security, zero-day, rmm, n-central, vulnerability

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev