Covered by 2 outlets — first reported by Sophos News, Nov 10, 00:00 UTC
N-able issues advisory on critical vulnerabilities
Summary
N-able announced on November 9 that it was responding to the public disclosure of critical vulnerabilities in N-central, its remote monitoring and management platform used by IT providers. Rapid7 says an independent researcher published details and proof-of-concept code, under the name Able2Shell, covering 33 issues, including unauthenticated remote code execution, privilege escalation to root, credential disclosure and unauthorized account creation. Rapid7 says the disclosure prompted a shutdown of N-able's hosted service.
AI summary by the SecurityTabs newsroom, checked against Sophos News, Rapid7 Blog. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
Sophos NewsFirst report
N-able issues advisory on critical vulnerabilities
Rapid7 Blog
Critical vulnerabilities in N-able N-central prompt hosted shutdown
Overview On November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central , its remote monitoring and management (RMM) platform.
Explained
The technology and terms in this story. Learn more
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- AttackPrivilege escalationGoing from limited access to more powerful access, such as from a normal user to administrator.