N-able temporarily took its N-central hosted environments offline after a security researcher disclosed 33 critical vulnerabilities, collectively named “Able2Shell,” affecting remote monitoring and management servers. On November 10, N-able released a critical security update (N-central 2026.4 HF2) addressing these flaws, which include remote code execution and privilege escalation risks, and restored hosted services after applying patches; customers with on-premises deployments are urged to upgrade immediately. Despite scanning activity related to proof-of-concept exploits, N-able and Huntress have not observed active exploitation in customer environments.
N-able Disables Cloud Services Following Disclosure of “Able2Shell” Exploit Chains
