N-able issues advisory on critical vulnerabilities
Categories: Threat ResearchTags: advisory, N-able
On November 9, 2026, a security researcher released a series of proof-of-concept (PoC) scripts targeting various vulnerabilities in N-able’s N-central platform. The collection of PoCs claims to exploit several critical weaknesses in the N-central platform. As a result, N-able has taken the precautionary step of taking their N-central Hosted Environments offline.
At this time there is third-party reporting suggesting that exploitation is occurring in the wild. N-Able’s advisory does not indicate that they have observed exploitation as of this writing; however they do note that they have observed scanning activity associated with the published PoC code. At this time, Sophos X-Ops has not observed exploitation. We recommend that operators of on-premises N-central servers follow N-able’s advice.
Recommended actions
Sophos X-Ops recommends that organizations review N-able’s advisory and monitor it for further instructions from N-able.
Sophos countermeasures
SophosLabs continues to monitor the threat landscape for activity related to this threat and will deliver detections and protections as available.
