N-able ships N-central hotfix after 33 Able2Shell flaws go public
Build 2026.4.1.26 patches seven CVEs and disables remote control, while proof-of-concept code for all 33 issues stays public.
Stories per day · 30 days
3 RSS
Relatedn-able15rmm12able2shell9remote-code-execution9xxe7zero-day7proof-of-concept4privilege-escalation2remote-access2barracuda1cisa-kev1critical-flaws1microsoft1nodejs1outage1outlook1patch-tuesday1plex1
25 stories, newest first · one card per story
Stories tagged #n-central
N-able takes N-Central offline after published zero-day bugs
Hosted N-Central is down, and customers were told to shut self-hosted installs while fixes are applied.
1
N-able warns of scanning for critical N-central flaws after public PoC
Hotfix 2, build 2026.4.1.26, covers seven CVEs, including path-traversal remote code execution CVE-2026-125882.
N-able releases N-central 2026.4 HF2 for publicly disclosed zero-days
Defused saw internet probing of the flaws; Shadowserver counts about 148 exposed servers, down from 1,338.
N-able hotfixes seven N-central CVEs after Able2Shell proof-of-concept
A researcher published proof-of-concept code for 33 alleged flaws; N-able says hosted servers are upgraded and no customer compromise is confirmed.
N-able ships N-central emergency fix after 33 exploits published
Hosted N-central was taken offline worldwide, and on-premises customers were told to shut servers down until 2026.4 HF2.
Microsoft Patch Tuesday discloses 1,093 bugs, including exploited Outlook flaw
CISA ordered agencies to patch exploited Outlook, Barracuda and other bugs, with Outlook due by month’s end.
Terminal2Shell ‘zero-day’ is satire, not a confirmed flaw
Opening a terminal as a signed-in user is ordinary behavior, and the claimed CVSS 11.0 exceeds the official scale.
1
Volt Typhoon used Silent Train for US zero-day intrusions
Lumen says four confirmed zero-day campaigns hit management platforms, with credential theft and chains of compromised devices.
1
How to secure RMM software: 8 controls MSPs should test
An Acronis-backed checklist tells MSPs to test eight RMM controls, citing N-able and SharePoint flaws.
CVE-2026-86218 | N-able N-central Pre-Authentication Remote Code Execution Vulnerability
N-able N-central pre-auth RCE CVE-2026-86218 (CVSS 10.0) is actively exploited; CISA added it to KEV and a hotfix is available.
CISA Warns of N-able N-central RCE Vulnerability Exploited in the Wild
CISA added CVE-2026-86218, a CVSS 10.0 unauthenticated RCE in N-able N-central RMM, to its KEV catalog; on-premises admins must patch to 2026.3.1.14.
2
N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
CISA added CVE-2026-86218 (CVSS 10.0), a pre-auth RCE in N-able N-central, to KEV after N-able confirmed in-the-wild exploitation; patch by September 11.
N-able security advisory (AV26-885)
N-able says CVE-2026-86218 in N-central is exploited in the wild; MSPs must apply hotfix 2026.3.1.14 (2026.3 HF4).
2
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)
Rapid7 disclosed two chained N-able N-central flaws, CVE-2026-86206 and CVE-2026-86207, enabling unauthenticated admin account creation; patched in 2026.3 Hotfix 3.
5
N-able Patches Critical Zero-Day in N-central
N-able patches critical unauthenticated RCE zero-day CVE-2026-86218 in N-central, exploited in the wild; on-premises admins must apply hotfix 2026.3 HF4.
2
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Weekly recap: actively exploited Chrome V8 zero-day, MikroTik RouterOS zero-day chain, Magento StyleSmuggler backdoor, and critical N-able N-central flaws.
6
N-able Releases Hotfix for Critical Remote Code Execution Vulnerability
N-able shipped Hotfix 4 patching CVE-2026-86218, a CVSS 10.0 pre-authentication RCE in N-central, with no confirmed production exploitation yet.
Back-to-back N-able bugs send admins on a patching spree
CVE-2026-86218, a CVSS 10.0 pre-auth RCE in N-able N-central, is being exploited in the wild; Hotfix 4 mitigates it immediately.
2
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
N-able shipped Hotfix 4 for a CVSS 10.0 unauthenticated RCE (CVE-2026-86218) in N-central RMM, with conflicting statements on exploitation.
1
N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws
N-able released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) fixing CVE-2026-86218, a critical pre-authentication RCE.
N-able patches max severity N-central flaw amid ongoing attacks
N-able ships an emergency hotfix for a maximum-severity RCE flaw in its N-central RMM platform that attackers are actively exploiting.
1
N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)
N-able shipped an emergency hotfix for CVE-2026-86218, a pre-auth RCE zero-day in N-central RMM observed exploited in the wild.
2
Critical N-able N-central Vulnerability and Active Exploitation
N-able N-central pre-auth RCE zero-day CVE-2026-86218 (CVSS 10.0) is exploited in the wild; on-prem admins must upgrade to 2026.3 HF4.
3