Vulnerabilità · 42 minuti fa
N-able ha riportato online gli ambienti hosted con Hotfix 2 il 10 novembre: la build 2026.4.1.26 corregge sette CVE, ma non chiarisce quali delle 33 vulnerabilità dichiarate da Sean Bales siano coperte. N-able le definisce le più critiche e prevede ulteriori aggiornamenti. Sono interessate le versioni precedenti alla 2026.4.1.26.
Una delle falle riguarda i percorsi dei file caricati: un attaccante può indirizzare un file fuori dalla posizione prevista nella repository, fino a eseguire codice sul server. Il controllo remoto integrato resta temporaneamente disabilitato; sui sistemi hosted, server online non significa agent e probe già aggiornati: gli agent vanno aggiornati prima delle probe.
Tenable riferisce tentativi sui propri honeypot, ma al 10 novembre non risultavano compromissioni confermate di server dei clienti. I tentativi mostrano interesse per i PoC, non accessi riusciti; resta inoltre da chiarire quante delle altre segnalazioni abbiano già una correzione.
CVE in questo aggiornamento
7 CVE
Distribuite tra N-central.
0 critiche · 0 alte · 0 medie · 0 basse
0 in CISA KEV · 0 con EPSS sopra 1%
14 fonti che coprono questa storia
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
Attackers exploit 4EverAble2Shell to deploy XMRig miners on 21 N-central servers as N-able restricts features and urges Agent and Probe upgrades.
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Attackers probe 4EverAble2Shell against N-able N-central servers with Legacy API enabled, but successful exploitation remains unconfirmed.
Hackers Target N-central Zero-Days as N-able Rushes Patches
N-able patched the unauthenticated ones.
N-able Takes N-central Offline After Discovery of 33 Flaws
The RMM provider released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
N-able fixes seven N-central CVEs after 33 alleged zero-days are published
N-able issues hotfix after researcher dumps PoCs in disclosure spat
The company briefly disabled access to its RMM platform after an independent researcher warned of critical flaws.
N-able releases security hotfixes for zero-day vulnerabilities
N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline.
Múltiples vulnerabilidades en N-central de N-able
N-able ha publicado una actualización que corrige 7 vulnerabilidades en N-central, 2 de severidad crít
Kwetsbaarheden verholpen in N-able N-central
N-able heeft meerdere kwetsbaarheden verholpen in N-able N-central.
Able2Shell FAQ: N-able N-central Zero-Days and Hotfix 2
N-able's Hotfix 2 fixes seven CVEs, including CVE-2026-125883.
N-able N-central gets emergency fix two days after 33 exploits published
Exploitation attempts have already been detected against the RMM platform, which has been under attack several times in recent months for a variety of vulnerabilities.
Part of the PlainSec briefing for 2026-11-13