N-Able: rilevate molteplici vulnerabilità 0-day denominate "Able2Shell" in N-central

CVE v události 7

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.

Jak se o tom psalo 6

1. 11. 11. 2026 · zachyceno 04:00 · NCSC-FI FI

   N-able N-central Critical Security Incident - Release Available

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Functional, CVSSv4.0: 9.3, CVEs: CVE-2026-125883, CVE-2026-125878, CVE-2026-125879, CVE-2026-125880, CVE-2026-125881, CVE-2026-125882, CVE-2026-91000, Summary: IMPORTANT: N-central Critical Security Incident N-able is currently responding to the public disclosure of critical vulnerabilities in N-central by an independent security researcher. We are now observing scanning activity associated with the published proof-of-concept…

2. 10. 11. 2026 14:37 · CSIRT Itálie (ACN) IT nadpis události

   N-Able: rilevate molteplici vulnerabilità 0-day denominate "Able2Shell" in N-central

   Rilevate vulnerabilità 0-day, complessivamente denominate “Able2Shell”, in N-central, piattaforma di monitoraggio e gestione remota degli ambienti informatici. Tali vulnerabilità potrebbero consentire ad un attaccante remoto non autenticato di eludere i meccanismi di autenticazione, acquisire credenziali e informazioni riservate, alterare configurazioni, scrivere file arbitrari ed eseguire codice con privilegi elevati.

3. 10. 11. 2026 · zachyceno 04:30 · NCSC-FI FI

   N-able N-central Critical Security Incident - 33 critical zero-day vulnerabilities released

   Classification: Critical, Solution: Unavailable, Exploit Maturity: Functional, CVSSv3.1: None, CVEs: , Summary: N-able is currently responding to a public disclosure and non-responsible communication of critical vulnerabilities in N-central found by an independent researcher. At this time, we have not seen any active exploitation of these vulnerabilities. We are currently working on a hot fix and expect to have that available soon. N-central Hosted Environments Have Been Taken Offline As a…

4. 10. 11. 2026 · zachyceno 17:00 · Sophos Threat Research GB

   N-able issues advisory on critical vulnerabilities

   Categories: Threat Research Tags: advisory, N-able

5. 9. 11. 2026 22:26 · BleepingComputer US

   N-able takes cloud platform offline after 30+ "zero-days" published

   N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that could let attackers take over vulnerable systems. [...]

6. 9. 11. 2026 22:00 · Huntress US

   N-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains

   N-able took N-central offline after 33 critical flaws were disclosed, including chains enabling remote code execution and privilege escalation.