International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 72 · Tier A10 sources

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

The Hacker News ·

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

The Brief · written from 10 sources

  • N-able took N-central Hosted Environments offline and urged on-premises customers to shut down their servers after a researcher publicly disclosed over 30 vulnerabilities tracked as Able2Shell.
  • Sources say the flaws could allow remote code execution, credential theft and administrator account creation.
  • N-able released hotfixes on November 11 for the zero-days, and SecurityWeek reports hackers began targeting them shortly after disclosure.
  • On November 12 a new public disclosure claimed exploits that work against patched on-premises N-central servers running 2026.4.1 HF2; N-able said it is investigating.

Why it matters

Anyone running N-central, hosted or on-premises, may face takeover of the RMM server and the endpoints it manages, so patch status and exposure need checking now.

Who’s affected

  • Organisations using N-central Hosted Environments
  • On-premises N-central customers
  • Teams running N-central 2026.4.1 HF2

What to do

  1. Apply the N-able hotfixes for N-central
  2. Follow N-able's guidance on shutting down on-premises N-central servers until further notice
  3. Check N-able's updates on the new claims affecting patched on-premises servers

N-able on Thursday said it's investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. "Based on our initial review, the server issue described depends on a non-default configuration in…

Read the full story at thehackernews.com ↗

Timeline

  1. N-able announces it is responding to public disclosure of N-central vulnerabilities

  2. BleepingComputer

    N-able takes cloud platform offline after 30+ "zero-days" published

  3. N-able takes N-central Hosted Environments offline and urges on-premises customers to shut down servers

  4. The Hacker News

    N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits

  5. SecurityWeek

    N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days

  6. Rapid7 Cybersecurity Blog

    Critical vulnerabilities in N-able N-central prompt hosted shutdown

  7. TechCrunch

    N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

  8. N-able releases hotfixes for the zero-day vulnerabilities

  9. BleepingComputer

    N-able releases security hotfixes for zero-day vulnerabilities

  10. darkreading

    N-able Takes N-central Platform Offline After Discovery of 33 Flaws

  11. Reports emerge of hackers targeting the N-central zero-days

  12. New disclosure claims exploits work against patched on-premises N-central servers; N-able investigates

  13. SecurityWeek

    Hackers Target N-central Zero-Days as N-able Rushes Patches

  14. The Hacker News

    New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

  15. BleepingComputer

    New N-able "4EverAble2Shell" zero-day exploited hours after PoC released

Full coverage · 10 sources

How do you feel about this?

0 Comments