Hackers Target N-central Zero-Days as N-able Rushes Patches
Source SecurityWeek
Mentioned vulnerabilities
Rated High by Threat Radar's AI analysis
Data as of 12 Nov 2026, 09:48 UTC
What to do
AI-suggested
N-able has released patches for all unauthenticated vulnerabilities in N-central 2026.4 HF2 and recommends immediate updating of all on-premises deployments. Hosted environments have been brought back online with risk largely mitigated. Customers should disconnect on-premises deployments until patched. Remaining vulnerabilities requiring authentication will be addressed in subsequent hotfixes. Monitoring for updates from N-able and applying patches promptly is critical to mitigate risk.
Description
A security researcher publicly disclosed over 30 zero-day vulnerabilities affecting N-able's N-central product, leading to active scanning and probing of exposed instances. N-able responded by taking hosted environments offline, urging customers to disconnect on-premises deployments, and releasing patches for all unauthenticated vulnerabilities. Remaining vulnerabilities require authenticated access and will be addressed in subsequent updates. The disclosed flaws include critical issues such as XXE, XSS, SSRF, privilege escalation, and remote code execution. N-able reports no confirmed compromises in hosted environments but acknowledges ongoing scanning activity leveraging the published proof-of-concept code.