30+ zero-day flaws force N-able to shut cloud platform
A researcher revealed 30+ zero-day vulnerabilities in N-able's platform. The company had failed to fix earlier flaws.
Researcher Sean Bales published working exploits for 30+ zero-day flaws in N-central. N-central is an IT management platform used by service providers to manage customer networks.
The worst flaw lets attackers take over systems without logging in. Attackers can steal credentials and run code as an admin.
N-able took its cloud platform offline right away. It told on-premises customers to shut down their servers.
The company released a fix and confirmed it already detected scanning attempts. Bales released the exploits publicly after N-able left his earlier reports unpatched for about five to six months.
- 30+
- Zero-day vulnerabilities disclosed
- Sean Bales
- Researcher
- N-central Appliance 2026.4.0.31
- Version tested
- 5 to 6 months
- Previous reports unpatched
Why it mattersAny managed service provider or IT team using N-central faced complete system compromise. Public exploit code means attackers can now target any version that is not patched.
AustraliaAustralian businesses using N-able for IT management faced service outages and potential security breach risk until the hotfix was deployed. Many MSPs and IT services firms serving Australian clients rely on this platform.
✓ Claims checked against the source. checked 12 h ago
