N-able Takes N-central Offline Following Disclosure of Zero-Day Vulnerabilities

On November 9, 2026, N-able took its hosted N-central remote monitoring platform offline and told customers with self-hosted servers to do the same after disclosure of 33 alleged zero-day vulnerabilities known as “Able2Shell.” The flaws may enable remote code execution and privilege escalation, but N-able said it had not observed active exploitation. The company is developing a hotfix and advised customers to keep servers offline until it confirms they are safe to restore.