N-able ships N-central hotfix after flaws force hosted shutdown
Original title: N-able Releases Emergency N-central Hotfix After 33 Vulnerabilities Trigger Worldwide Shutdown
Build 2026.4.1.26 fixes seven CVEs; public Able2Shell proof-of-concept drew scanning, and hosted service returned November 10.
N-able released N-central 2026.4 Hotfix 2, build 2026.4.1.26, on November 10 after disclosure of 33 alleged flaws led it to shut down hosted remote monitoring worldwide from November 9. Research published by Sean Bales describes four exploit chains against Appliance 2026.4.0.31; Huntress said three could yield remote code execution and one root access. Release notes cover XXE, OGNL injection, stored XSS, SSRF, path traversal to code execution, and two privilege-escalation issues. N-able reported scanning tied to the public exploit code but said that does not prove a breach.
Unconfirmed: N-able has not confirmed that all 33 claimed flaws were validated, and scanning does not prove a successful breach.
- Hosted services in the Americas, Europe, and Asia-Pacific were taken offline.
- On-premises customers were also told to take their own servers offline.
- Customers must upgrade Agents before Probes; older servers need an intermediate upgrade.
- Built-in remote control stays disabled; Take Control still works.
- The seven fixed CVEs do not confirm all 33 researcher claims.
Impact: Remote code execution or root on N-central servers
| Product | Affected | Fixed in |
|---|---|---|
| N-able N-central | Appliance 2026.4.0.31; earlier versions potentially affected | 2026.4.1.26 (2026.4 Hotfix 2) |
- 1.Keep unpatched N-central servers offline until the upgrade succeeds.
- 2.Upgrade Agents first, then Probes, including hosted and on-premises deployments.
- 3.Follow the new release guidance rather than relying on earlier hotfixes.
From the original article
2 min read at cybersecuritynews.com
N-able has released N-central 2026. 4 Hotfix 2 after the public disclosure of 33 alleged vulnerabilities forced a worldwide shutdown of its hosted remote monitoring and management platform. Released on November 10, the emergency update, build 2026.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.