Vulnerabilities · 32m ago
N-able’s hosted N-central servers are back online after November 10 Hotfix 2 fixed seven CVEs, Infosecurity Magazine reports. The update also temporarily disables built-in remote control. Tenable says the fix addresses only part of a researcher’s 33 alleged findings, and N-able has not mapped each finding to a vendor fix.
One patched flaw affects file uploads: an attacker could steer a file outside N-central’s intended repository path, potentially leading to code execution on the server, according to NCSC-NL. Tenable says security firms observed attempts against honeypots, but no customer-server compromise had been confirmed as of November 10.
For managed service providers, a compromised N-central server could put the environments it manages at risk. The hotfix also changes operations: agents must be updated before probes, while built-in remote control remains unavailable temporarily. Reporting has not established whether customer servers were accessed before the fix.
CVEs in this update
7 CVEs
Across N-central.
0 critical · 0 high · 0 medium · 0 low
0 in CISA KEV · 0 with EPSS above 1%
14 sources covering this story
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
Attackers exploit 4EverAble2Shell to deploy XMRig miners on 21 N-central servers as N-able restricts features and urges Agent and Probe upgrades.
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Attackers probe 4EverAble2Shell against N-able N-central servers with Legacy API enabled, but successful exploitation remains unconfirmed.
Hackers Target N-central Zero-Days as N-able Rushes Patches
N-able patched the unauthenticated ones.
N-able Takes N-central Offline After Discovery of 33 Flaws
The RMM provider released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
N-able fixes seven N-central CVEs after 33 alleged zero-days are published
N-able issues hotfix after researcher dumps PoCs in disclosure spat
The company briefly disabled access to its RMM platform after an independent researcher warned of critical flaws.
N-able releases security hotfixes for zero-day vulnerabilities
N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline.
Múltiples vulnerabilidades en N-central de N-able
N-able ha publicado una actualización que corrige 7 vulnerabilidades en N-central, 2 de severidad crít
Kwetsbaarheden verholpen in N-able N-central
N-able heeft meerdere kwetsbaarheden verholpen in N-able N-central.
Able2Shell FAQ: N-able N-central Zero-Days and Hotfix 2
N-able's Hotfix 2 fixes seven CVEs, including CVE-2026-125883.
N-able N-central gets emergency fix two days after 33 exploits published
Exploitation attempts have already been detected against the RMM platform, which has been under attack several times in recent months for a variety of vulnerabilities.
Part of the PlainSec briefing for 2026-11-13