Critical vulnerabilities in N-able N-central prompt hosted shutdown
Overview On November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central , its remote monitoring and management (RMM) platform. In a public disclosure titled Able2Shell, an independent researcher has published details and proof-of-concept (PoC) code covering 33 issues.
Summary from Rapid7 Blog.
Explained
The technology and terms in this story. Learn more
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- AttackPrivilege escalationGoing from limited access to more powerful access, such as from a normal user to administrator.
Related coverage
Other sources covering the same vulnerabilities or event.
