N-able took hosted N-central offline and told on-premises customers to disconnect servers after public disclosure of 33 alleged flaws and working exploit chains, leaving MSPs to manage both security exposure and management-service interruption.
What changed
Treat N-central as an isolated privileged control plane until N-able authorises restoration. Public proof-of-concept chains, an unavailable hosted service and an unpublished fixed build make safe recovery, customer assurance and compromise assessment the immediate decisions.
Public record through 2026-11-10. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
French internet exposure linked to controller vendors
Counts cover internet-exposed devices made by companies named in the CERT-FR refrigeration advisory; they do not establish vulnerability or compromise. 1–15 October 2026: 1853. 16–31 October 2026: 558. 1–6 November 2026: 316. Focus the chart and use the up and down arrow keys for detail. Source: Palo Alto Networks Unit 42, using Cortex Xpanse observations.