Ethical Hacking News
A critical vulnerability has been discovered in the N-central platform, compromising 21 servers and putting millions of users at risk. The vulnerability, dubbed 4EverAble2Shell and Agent2Shell, allows attackers to execute arbitrary code as root and gain SYSTEM-level access to Windows systems under specific conditions. The vulnerability has been found to be exploitable through a critical Apache Axis vulnerability, tracked as CVE-2026-90436, which has a CVSS score of 9.8. In this article, we will explore the details of the vulnerability, the impact it has had on the N-central platform, and the steps being taken by N-able to address the issue.
Hackers exploited a critical vulnerability in the N-central platform, compromising 21 servers and putting millions of users at risk. The vulnerability, dubbed 4EverAble2Shell and Agent2Shell, allows attackers to execute arbitrary code as root and gain SYSTEM-level access to Windows systems. The N-central platform's parent company, N-able, has restricted features, turned off legacy API and Intune integration, and recommended upgrading Agents and Probes to version 2026.4 HF1. The vulnerability has been found to be exploitable through a critical Apache Axis vulnerability (CVE-2026-90436) with a CVSS score of 9.8. The hackers have been using the vulnerability to deploy malware, steal sensitive information, and deploy cryptocurrency miners on vulnerable servers.
In a concerning development, hackers have exploited a critical vulnerability in the N-central platform, compromising 21 servers and putting millions of users at risk. The vulnerability, dubbed 4EverAble2Shell and Agent2Shell, allows attackers to execute arbitrary code as root and gain SYSTEM-level access to Windows systems under specific conditions.
The N-central platform, which is used by a large number of organizations to manage their IT infrastructure, has been affected by the vulnerability. The hackers have been using the vulnerability to deploy cryptocurrency miners on vulnerable servers, further compromising the security of the affected servers.
The vulnerability was first discovered by an independent security researcher, Sean Bales, who disclosed it to the public. The vulnerability has been found to be exploitable through a critical Apache Axis vulnerability, tracked as CVE-2026-90436, which has a CVSS score of 9.8.
The hackers have been using the vulnerability to gain access to the servers, and in some cases, have also been using it to deploy malicious scripts that can execute arbitrary code on the affected servers. The hackers have also been using the vulnerability to steal sensitive information from the affected servers.
The N-central platform's parent company, N-able, has taken steps to address the vulnerability, including restricting certain features and integrations, turning off the legacy API by default, and turning off the Intune integration while additional protections are implemented and validated. The company has also recommended that hosted customers upgrade their Agents and Probes to N-central version 2026.4 HF1 and above, as the update introduces changes in how the Probe and Agent communicate.
In addition, the company has urged on-premises customers to upgrade their Agents and Probes and ensure that the legacy API access is disabled in the environment, if it has been previously turned on. The company has also stated that it is actively assessing the new disclosures, developing additional remediation, and working to safely restore affected functionality.
The development has sent shockwaves through the cybersecurity community, with many experts warning of the potential risks and consequences of the vulnerability. The vulnerability has been found to be exploitable by threat actors, who have been using it to deploy malware and steal sensitive information from affected servers.
The incident highlights the importance of keeping software up to date and patching vulnerabilities in a timely manner. It also highlights the need for organizations to have robust security measures in place to protect their infrastructure and data from cyber threats.
In this article, we will delve deeper into the details of the vulnerability, the impact it has had on the N-central platform, and the steps being taken by N-able to address the issue.
Related Information:
https://www.ethicalhackingnews.com/articles/Hackers-Exploit-Critical-N-central-Vulnerability-Compromising-21-Servers-and-Putting-Millions-of-Users-at-Risk-ehn.shtml
https://thehackernews.com/2026/11/hackers-exploit-n-central-flaws-to.html
https://nvd.nist.gov/vuln/detail/CVE-2026-90436
https://www.cvedetails.com/cve/CVE-2026-90436/
Published: Fri Nov 13 01:12:49 2026 by llama3.2 3B Q4_K_M
