4EverAble2Shell

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 12, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

Attackers exploit N-central zero-day hours after public PoC release

The 4EverAble2Shell chain yields root on patched servers with Legacy API enabled; miners hit hosts in seven countries.

SecurityWeekNov 13, 07:20 UTC · 1d agoExploit / PoCExploited17 sourcesCVE-2026-904361

N-able N-central HF2 still exposed to new unauthenticated root exploit code

Huntress says 4EverAble2Shell and Agent2Shell target build 2026.4.1.26, with no fix and no confirmed customer attacks.

Cyber Security Newsupdated Nov 13, 07:20 UTC · 1d agofirst Nov 12, 16:53 UTC · 1d agoExploit / PoC 17 sources1

Related CVEs

by mentions

CVE-2026-904361%9.8
Unauthenticated RCE in Apache Axis 1.x via SOAP fault
published 7d agoApache AxisPoC

Appears with

N-centralproduct · 2
N-ablevendor · 2
Agent2Shellmalware · 2
Previdianorganization · 1
Huntbackorganization · 1
Lupovisorganization · 1
WatchTowrorganization · 1
Apachevendor · 1
XMRigmalware · 1
Apache Axisproduct · 1
Huntressorganization · 1

Entities are extracted by the model from each article. First seen Nov 12, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.