Back to Feed
VulnerabilitiesNov 10, 2026

N-able Takes N-central Servers Offline Worldwide After 33 0-Day Vulnerabilities and Able2Shell Exploits

N-able takes N-central servers offline worldwide due to 33 zero-day vulnerabilities and Able2Shell exploits.

N-able has taken its hosted N-central environments offline globally following the public disclosure of 33 alleged zero-day vulnerabilities and associated exploit code, dubbed Able2Shell. The company also advised customers running N-central on their own servers to do the same, impacting users of its remote monitoring and management platform. The vulnerabilities, which can form exploit chains leading to remote code execution and privilege escalation, target N-central Appliance 2026.4.0.31 and potentially earlier versions.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run N-able?

Get an email when a new story names N-able, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

N-able's N-central remote monitoring and management platform was found to contain 33 alleged zero-day vulnerabilities, with public exploit chains (Able2Shell) enabling remote code execution and privilege escalation — forcing a global emergency shutdown of hosted environments. The root issue reflects a failure in proactive vulnerability management: a widely-deployed security tool itself became the attack surface, compounding risk for every downstream customer it was meant to protect. Because RMM platforms have privileged access across customer environments, a single exploit chain can cascade into a supply-chain-style compromise at scale. This incident underscores that security tooling must be subject to the same rigorous vulnerability assessment and rapid remediation processes as any other critical infrastructure.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — Able2Shell
  • cve — CVE-2026-86218

Entities

N-central (product)N-able (vendor)Remote Monitoring and Management (RMM) (technology)XML External Entity (XXE) (technology)