N-central: zero-day vuln

N-central

Hackers target N-central zero-days as N-able rushes patches

Do this now

Check the N-able advisory for a fix for N-central and restrict access to its management interface meanwhile.

Who should check: teams running Remote access

First seen: 12 Nov 2026
Last update: 12 Nov 2026, 10:18 UTC
Source: news
On the menu as: Remote access

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## N-central: zero-day vuln
Severity: unknown. Patch status: fix status unknown.
Affected: N-central

Hackers target N-central zero-days as N-able rushes patches

## Steps
1. This touches infrastructure (remote-support). Look in terraform, ansible, cloud-init, Dockerfiles and docs for the product and version we run. If it isn't in the repo, say so and list what a human should check on the box.
2. No source names a fix yet; check the vendor advisory. Until one ships: N-able has rolled out patches for several of the zero-days a researcher dropped over the weekend and warned of in-the-wild activity targeting them.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.securityweek.com/hackers-target-n-central-zero-days-as-n-able-rushes-patches/
https://pwned.coffee/i/n-central-zero-day-vuln

Timeline

12 Nov 2026, 10:18 UTC
Fix status: partial fix → unknown.
12 Nov 2026
First reported.

Receipt

Exploitation: No known exploitation
Fix: N-able has rolled out patches for several of the zero-days a researcher dropped over the weekend and warned of in-the-wild activity targeting them.
Score: No CVSS published yet: severity unknown.
Last checked: 13 Nov 2026, 16:26 UTC

Sources: KEV – CVE record – Vendor –

Sources

securityweek.com: Hackers Target N-central Zero-Days as N-able Rushes Patches

Follow on X

Totalone coffee