N-able Releases Hotfixes for Multiple Zero-Day Vulnerabilities in N-central RMM Platform
N-able has issued security hotfixes addressing several zero-day vulnerabilities in its N-central remote monitoring and management platform. The flaws were publicly disclosed by researcher Sean Bales, who published proof-of-concept exploits after alleging prior reports went unaddressed. As a precaution, the company took all hosted N-central environments offline across the Americas, Europe, and Asia-Pacific regions. The patches cover critical issues including remote code execution, XXE injection, OGNL injection, stored XSS, and local privilege escalation. Threat intelligence firm Defused reported active scanning and exploitation attempts against exposed servers, while Shadowserver noted a sharp drop in publicly reachable instances. On-premises customers are strongly urged to upgrade immediately following detailed guidance before restoring access.
BleepingComputerNov 11, 2026Translated from English