N-able has taken its hosted N-central environments offline worldwide and told on-premises customers to shut their servers down until further notice, after a researcher publicly disclosed more than 30 alleged zero-day vulnerabilities in the RMM platform, BleepingComputer reports.
What the vendor says
- N-able is treating it as a critical incident and says it’s developing a hotfix. In a statement it called the Sunday-night disclosure “non-responsible communication.”
- Hosted N-central is down across the Americas, Europe and Asia-Pacific. N-able says some other services reached through N-able Login are still up.
- There’s no ETA yet. The company says it plans to post updates every four hours, or sooner if there’s news.
I’m not going through the bug list or any proof-of-concept. If you run N-central, follow the vendor: cloud is already offline, and on-prem should stay down until N-able gives the all-clear and a patch.
God Bless, and May the Source Be with You!
