N-able takes N-central offline after disclosure of 33 critical flaws
Original title: N-able Takes N-central Servers Offline Following Disclosure of 33 Critical Security Vulnerabilities
Hosted consoles are down in the Americas, APAC, and Europe; on-premises customers were told to shut servers down.
N-able opened Incident 202561 on November 9, 2026, after an independent researcher publicly disclosed 33 critical flaws in N-central without coordinated disclosure. Hosted environments were taken offline and rated a major outage still under investigation. N-able says it has detected no active exploitation and no evidence that customer environments were compromised. A hotfix is estimated for midday November 10 EST. Ecoverse services via n-able.app remain available.
Unconfirmed: The 33 flaws are not identified, and N-able has not published technical details or a fixed build.
- On-premises customers in all three regions were urged to take N-central servers offline.
- N-able plans status updates every four hours until it issues further guidance.
- Temporary options include on-demand Windows patching, Security Insights, and native Take Control for Windows and Linux.
- Take Control from n-able.app does not currently support macOS.
Impact: Critical RMM flaws could expose control of many endpoints
| Product | Affected |
|---|---|
| N-able N-central | — |
- 1.Keep on-premises N-central servers offline until N-able confirms it is safe.
- 2.Use n-able.app for urgent patching and monitoring while servers are down.
- 3.After restoration, review admin accounts, Take Control sessions, and new services.
From the original article
2 min read at gbhackers.com
N-able has pulled its hosted N-central environments offline after an independent researcher publicly disclosed critical flaws in the remote monitoring and management (RMM) platform. The company opened Incident 202561 on November 9, 2026, at 15:15 UTC. It rated the event a “Major Outage” and listed the status as “Investigating.”
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.