CriticalCVE
N-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains
Huntress·Source published ·1 min read
What happened?
N-able took N-central offline after 33 critical flaws were disclosed, including chains enabling remote code execution and privilege escalation.
Key details
- N-able took its hosted N-central environment offline on November 9 after public disclosure of 33 critical vulnerabilities.
- An independent researcher published details of 33 critical vulnerabilities on GitHub that can be chained into four exploits called Able2Shell.
- Three of the chained exploits lead to remote code execution and one leads to privilege escalation to root.
- The vulnerabilities impact servers running N-central Appliance 2026.4.0.31 and likely earlier versions.
- N-able reported no active exploitation as of November 9 at 15:15:00 UTC and is developing a hotfix.
- Organizations should keep N-central servers offline until N-able confirms it is safe to restore service.
Affected
- N-central Appliance 2026.4.0.31 and likely earlier versions.
Fixes and mitigations
- Keep N-central servers offline until N-able confirms it is safe to restore them.
What to look for
- Review login and authentication activity from November 8 onward for unexpected or unauthorized access.
- Monitor for anomalous remote access sessions, new scripts being deployed, or unauthorized creation of new administrator accounts.
Summarised by SecOraLens from Huntress. Always read the original source before acting. How SecOraLens verifies advisories.