N-able has pulled its N-central service offline following the disclosure of 33 vulnerabilities, dubbed Able2Shell, identified in version 2026.4.0.31 by researcher Sean Bales.
The identified issues include potential remote command execution, credential theft, and arbitrary file writing.
N-able is currently developing an urgent patch and has instructed self-hosted customers to disable their appliances until a fix is available.
What happened
The security issues were found in N-able N-central Appliance version 2026.4.0.31. According to the researcher, these vulnerabilities could potentially allow third parties to steal passwords, write files, or execute commands on systems using the software.
Who is affected?
The issue affects users of the platform worldwide, including in the Americas, Europe and the Asia-Pacific region. N-able has asked customers who host the software on their own computers to immediately deactivate those machines.
N-able's attitude
The company clarified that so far it has not identified any real attacks exploiting these vulnerabilities. N-able technicians are already working on an urgent update to fix the problems. In the meantime, some platform functions, such as Asset View and Patching, remain accessible via N-able Login.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
