NewsDark Reading
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
Teaser from the source
The RMM provider also released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on N-central
Other advisories
- CriticalCVE-2026-125880N-able N-Central: Mehrere Schwachstellen
- HighCVE-2026-125880N-able N-central: Skript-Injection über HTTP-Header
- HighCVE-2026-125880N-able N-central: Skript-Injection über HTTP-Header
- HighCVE-2026-125880Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site Scripting (XSS).
- HighCVE-2026-125882N-able N-central: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-125882N-able N-central: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-125882Relative path traversal vulnerability in N-able N-central allows Path Traversal.
- CriticalCVE-2026-125881N-able N-central: Server-Side-Request-Forgery (SSRF)
Other news entries
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM AccessNewsThe Hacker News
- Hackers Target N-central Zero-Days as N-able Rushes PatchesNewsSecurityWeek
- N-able releases security hotfixes for zero-day vulnerabilitiesNewsBleepingComputer
- N-able N-Central: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0478 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-centralNewsNCSC-NL
- N-able N-central gets emergency fix two days after 33 exploits publishedNewsCSO Online
- Critical vulnerabilities in N-able N-central prompt hosted shutdownNewsRapid7
Source: https://www.darkreading.com/endpoint-security/n-able-n-central-offline-33-flaws
ID