Critical vulnerabilities in N-able N-central prompt hosted shutdown

What happened?

Overview On November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central, its remote monitoring and management (RMM) platform. In a public disclosure titled Able2Shell, an independent researcher has published details and proof-of-concept (PoC) code covering 33 issues. According to the disclosure, the issues include unauthenticated remote code execution (RCE), privilege escalation to root, credential disclosure, and unauthorized account creation.

Key details

• N-able disclosed critical vulnerabilities in N-central RMM platform after public Able2Shell release.
• Researcher published 33 issues including unauthenticated RCE, privilege escalation, and credential disclosure.
• One exploit chain combines XXE and session flaws to run code as nable service account.
• N-able detected scanning activity from PoC code but no confirmed customer exploitation.
• Hosted N-central classic environments taken offline while hotfix is developed.
• Compromise of RMM server risks downstream managed environments.

Summarised by SecOraLens from Rapid7. Always read the original source before acting. How SecOraLens verifies advisories.