N-able has shipped N-central 2026.4 HF2 and restored hosted environments, but customers must still upgrade Agents and Probes while investigating a disclosure window marked by public exploit chains and observed scanning.
What changed
Treat N-central as a privileged control-plane incident, not a routine patch cycle. N-able’s hotfix confirms seven CVEs and restores a supported server target, while Huntress reports that N-able observed scanning associated with published proof-of-concept code.
Public record through 2026-11-11. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
Security.io editorial scores from 0–100 combine privileged reach, public exploit availability, observed scanning, remediation complexity and service disruption. They are comparative editorial assessments, not external severity metrics. Exposure: 94. Urgency: 97. Business consequence: 92. Focus the chart and use the up and down arrow keys for detail. Source: Security.io editorial scoring based on N-able release notes, Huntress research and independent reporting.