Remote access software provider N-able has temporarily shut down its cloud-hosted N-central platform after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities that could allow hackers to gain unauthorized access to customer networks. The company took the service offline on November 9, 2026, and urged customers running self-hosted installations to shut down their systems as a precaution.
According to N-able’s service status update, the shutdown allows its security and engineering teams to investigate the reported vulnerabilities and implement fixes. Customers have been unable to access N-central during the outage, affecting their ability to remotely monitor and manage connected devices.
Security Researcher Publishes Able2Shell Exploits
The incident began after security researcher Sean Bales published a collection of vulnerabilities on GitHub on November 8 under the name Able2Shell. The disclosures included proof-of-concept exploits demonstrating how attackers could steal authentication credentials, create unauthorized administrator accounts, and gain elevated access to affected systems.
The reported vulnerabilities involve several security weaknesses that could potentially be combined to compromise N-central installations. Some exploit chains could allow attackers to execute commands remotely or obtain root-level privileges, providing extensive control over affected servers.
Bales reportedly tested the vulnerabilities against a prerelease version of N-central and suggested that earlier versions could also be affected. The company received no advance notification about these particular vulnerabilities before their public disclosure.
N-able Urges Customers to Shut Down Self-Hosted Systems
N-able operates N-central as a remote monitoring and management platform used by businesses and IT service providers to maintain computers, servers, and other connected systems. The technology allows administrators to manage multiple devices through centralized access.
Because these platforms often hold privileged access to customer networks, security breaches can potentially expose multiple systems through a single compromised management server. Attackers could exploit administrative permissions to access sensitive information or interfere with connected devices.
N-able took its hosted environments offline across multiple regions and advised organizations operating on-premises N-central servers to temporarily disable them. The company said its teams were developing and validating a security hotfix before restoring normal operations.
Researcher Cites Earlier Unresolved Security Reports
Bales told BleepingComputer that he publicly disclosed the vulnerabilities because N-able allegedly failed to resolve separate security issues he had previously reported in another product. He claimed those earlier reports included remote code execution and privilege escalation vulnerabilities that remained unpatched.
N-able has not publicly addressed those allegations in detail. The company stated that it was responding to the newly disclosed vulnerabilities and prioritizing the protection of customer environments.
The company also reported that it had found no evidence of active exploitation or unauthorized access involving the disclosed vulnerabilities. However, it has not provided details about the extent of its investigation or the monitoring capabilities used to establish that assessment.
Featured image credits: Github
For more stories like it, click the +Follow button at the top of this page to follow us.