N-able takes hosted N-central offline after 30+ zero-days disclosed
Nov 9, 2026 · Summarized by Fundy Tech from BleepingComputer
N-able took its hosted N-central environments offline after a researcher disclosed more than 30 alleged zero-day flaws. On-premises customers were told to shut down servers while N-able builds a hotfix.
Key points
- Sean Bales published proof-of-concept exploits on GitHub.
- N-central is used by managed service providers and IT teams.
- N-able took hosted environments offline across three regions.
- The disclosure includes bypasses, file writes, traversal, XSS and RCE.
Why it matters
If you run managed services or rely on N-central, this is a service outage and a security risk. Customers may need to take systems offline until a fix is ready. Small businesses using an MSP should ask how their monitoring and remote management are being handled right now.
Who’s affected: N-able N-central hosted and on-premises users
What to do
- Shut down affected on-premises N-central servers.
- Watch for N-able’s hotfix and recovery instructions.
- Review remote management access and logs.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.