Security AlertCritical
N-able probes N-central exploits after new zero-days are posted
Nov 12, 2026 · Summarized by Fundy Tech from 3 sources
The 30-second version
N-able is investigating new N-central vulnerability claims while attackers are already probing exposed servers. Customers running on-premise N-central are being told to disable Legacy API and patch quickly.
Key points
- N-central 2026.4.1 HF2 is under review for new vulnerability claims.
- Legacy API must be enabled and exposed for the server issue described.
- Attackers were probing within hours of the PoC release.
- Hosted N-central environments are not affected by this issue.
Why it matters
If your business uses N-able N-central, this could expose remote management systems to attack. That can affect device control, support work and the security of Windows endpoints you manage.
Who’s affected: On-premise N-able N-central servers
What to do
- Disable Legacy API if it is enabled.
- Update on-premise N-central as soon as possible.
- Check for exposed instances and signs of probing.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.