Ethical Hacking News
N-able has taken its N-central cloud environment offline following the disclosure of 33 zero-day vulnerabilities with proof-of-concept exploits. The move aims to secure the environment and address the identified vulnerabilities. Customers are advised to shut down their servers until further notice. This development highlights the importance of timely vulnerability disclosures and the need for organizations to stay informed about emerging security threats.
N-able has taken its N-central Hosted Environments offline due to the public disclosure of over 30 vulnerabilities. The affected services include N-central (hosted version) in the Americas, APAC, and Europe, as well as N-central On-premise in the same regions. The identified vulnerabilities include credential disclosure, arbitrary file writes, directory traversal, cross-site scripting (XSS), and remote code execution (RCE) flaws. N-able has assured customers that Ecoverse services remain available, but Hosted N-central classic environment and associated services are unavailable. The company is working on a hot fix to address the vulnerabilities and has not observed any signs of active exploitation.
N-able, a leading provider of cloud-based cybersecurity solutions, has recently taken its N-central Hosted Environments offline as a precautionary measure following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell. The move is aimed at securing the environment and implementing appropriate remediation measures to address the identified vulnerabilities.
The affected services include N-central (hosted version) in the Americas, APAC, and Europe, as well as N-central On-premise in the same regions. The development comes as independent security researcher Sean Bales disclosed multiple security flaws along with proof-of-concept (PoC) exploits, which were tested against N-able N-central Appliance 2026.4.0.31.
The identified zero-day vulnerabilities include credential disclosure, arbitrary file writes, directory traversal, cross-site scripting (XSS), XML external entity (XXE) injection, and remote code execution (RCE) flaws. These flaws were found to have multiple chains, including XXE/NCI trust abuse, support-token theft, unsigned NSP execution, XSS-to-OGNL, and authenticated reverse shells. Successful exploitation of these flaws can allow rogue administrative access to the N-central management interface and facilitate command execution as root.
Arbitrary file writes, traversal, credential disclosure, MDM impersonation, audit tampering, and privileged-helper injection were also identified as vulnerabilities. A native GenericTCP stack overflow achieves root command execution, further exacerbating the risks.
N-able has assured customers that the Ecoverse services under N-able Login remain available and online, including Asset View, Patching, Vulnerability Management, scripting, policies, and tagging. However, customers will be unable to access their Hosted N-central classic environment, and associated services may be unavailable during this time.
The company has also stated that it has not observed any signs of active exploitation of these vulnerabilities, adding that it is currently working on a hot fix to address them. The development highlights the importance of timely vulnerability disclosures and the need for organizations to stay informed about emerging security threats.
As the cybersecurity landscape continues to evolve, it is essential for organizations to adopt a proactive approach to addressing vulnerabilities and implementing robust security measures to protect their systems and data. N-able's proactive response to this incident serves as a reminder of the importance of prioritizing cybersecurity and staying vigilant in the face of emerging threats.
Related Information:
https://www.ethicalhackingnews.com/articles/N-able-Takes-N-central-Cloud-Offline-Following-Disclosures-of-33-Zero-Days-with-PoC-Exploits-ehn.shtml
https://thehackernews.com/2026/11/n-able-takes-hosted-n-central-offline.html
Published: Tue Nov 10 02:50:15 2026 by llama3.2 3B Q4_K_M
