Vulnerabilities & Exploits · Zero-Day Exploit
N-able N-central returns online with remote control paused N-able’s hosted N-central servers are back online after November 10 Hotfix 2 fixed seven CVEs, Infosecurity Magazine reports. The update also temporarily disables built-in remote control. Tenable says the fix addresses only part of a researcher’s 33 alleged findings, and N-able has not mapped each finding to a vendor fix.
One patched flaw affects file uploads: an attacker could steer a file outside N-central’s intended repository path, potentially leading to code execution on the server, according to NCSC-NL. Tenable says security firms observed attempts against honeypots, but no customer-server compromise had been confirmed as of November 10.
For managed service providers, a compromised N-central server could put the environments it manages at risk. The hotfix also changes operations: agents must be updated before probes, while built-in remote control remains unavailable temporarily. Reporting has not established whether customer servers were accessed before the fix.
14 sources · 42m ago
CVEs in this update
7 CVEs
Across N-central.
0 critical · 0 high · 0 medium · 0 low
0 in CISA KEV · 0 with EPSS above 1%
Timeline Sources Nov 13 The Hacker News
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
Attackers exploit 4EverAble2Shell to deploy XMRig miners on 21 N-central servers as N-able restricts features and urges Agent and Probe upgrades.
original Nov 12 BleepingComputer
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed
original Nov 12 The Hacker News
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Attackers probe 4EverAble2Shell against N-able N-central servers with Legacy API enabled, but successful exploitation remains unconfirmed.
original Part of the PlainSec briefing for 2026-11-13
Every edition of this story: N-able N-central returns online with remote control paused
More from today Vulnerabilities & Exploits · Zero-Day Exploit
N-able N-central returns online with remote control paused N-able’s hosted N-central servers are back online after November 10 Hotfix 2 fixed seven CVEs, Infosecurity Magazine reports. The update also temporarily disables built-in remote control. Tenable says the fix addresses only part of a researcher’s 33 alleged findings, and N-able has not mapped each finding to a vendor fix.
One patched flaw affects file uploads: an attacker could steer a file outside N-central’s intended repository path, potentially leading to code execution on the server, according to NCSC-NL. Tenable says security firms observed attempts against honeypots, but no customer-server compromise had been confirmed as of November 10.
For managed service providers, a compromised N-central server could put the environments it manages at risk. The hotfix also changes operations: agents must be updated before probes, while built-in remote control remains unavailable temporarily. Reporting has not established whether customer servers were accessed before the fix.
14 sources · 42m ago
CVEs in this update
7 CVEs
Across N-central.
0 critical · 0 high · 0 medium · 0 low
0 in CISA KEV · 0 with EPSS above 1%
Timeline Sources Nov 13 The Hacker News
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
Attackers exploit 4EverAble2Shell to deploy XMRig miners on 21 N-central servers as N-able restricts features and urges Agent and Probe upgrades.
original Nov 12 BleepingComputer
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed
original Nov 12 The Hacker News
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Attackers probe 4EverAble2Shell against N-able N-central servers with Legacy API enabled, but successful exploitation remains unconfirmed.
original Part of the PlainSec briefing for 2026-11-13
Every edition of this story: N-able N-central returns online with remote control paused
More from today