> TritonInfoSec News
Home / Sep 08, 2026 / Story
0
#5 BleepingComputer general September 07, 2026 at 06:17 UTC

N-able patches max severity N-central flaw amid ongoing attacks

By Sergiu Gatlan

AI Summary

N-able released a fourth emergency hotfix in five weeks for its N-central RMM platform to address a maximum-severity unauthenticated remote code execution flaw, with all on-premises builds below version 2026.3.1.14 remaining vulnerable including those patched with Hotfix 3 the previous day. N-able's incident notice indicates the flaw has been exploited in the wild, making immediate patching critical for MSPs relying on N-central to manage client infrastructure.

Read full article → https://www.bleepingcomputer.com/news/security/n-a…

Relevance score: 87.0/100

# More from September 08

  1. 1
    Magento StyleSmuggler zero-day exploited to deploy Linux backdoor BleepingComputer
  2. 2
    Adobe Commerce Zero-Day Exploited to Backdoor Online Stores SecurityWeek
  3. 3
    Hackers exploit new MikroTik RouterOS flaws to hijack routers BleepingComputer
  4. 4
    Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication The Hacker News
  5. 6
    N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw The Hacker News
  6. 7
    BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations BleepingComputer
  7. 8
    Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits SecurityWeek
  8. 9
    Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts The Hacker News
  9. 10
    Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released The Hacker News