N-able takes cloud platform offline after 30+ "zero-days" published

What happened?

N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers take over vulnerable systems. [...]

Key details

• Researcher Sean Bales disclosed over 30 alleged zero-day vulnerabilities in N-central with proof-of-concept exploits on GitHub.
• The flaws include authentication bypass, credential disclosure, arbitrary file writes, directory traversal, XSS, XXE injection, and remote code execution.
• A critical exploit chain uses unauthenticated XXE to steal a session, reset a password, and execute commands as the nable user.
• The same exploit can create an enabled Default Administrator account with attacker-controlled credentials for rogue admin access.
• N-able took hosted N-central environments offline globally across Americas, Europe, and Asia-Pacific as a precaution.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.