An update to my post on N-able taking N-central offline. N-able has released N-central 2026.4 HF2, with fixes for the most critical of the bugs disclosed over the weekend, BleepingComputer reports.
What’s new
N-able says all hosted N-central environments are now upgraded. On-premises customers are “strongly” recommended to upgrade as soon as possible, and to follow the published upgrade guidance carefully before restoring normal access. Earlier guidance was to keep those servers offline while a fix was being built.
N-able has not said the bugs are being exploited in the wild. Researchers have reported scanning and probing of exposed servers, and the number of internet-facing N-central boxes has dropped sharply since Monday. I’m not walking through the bug list or any proof-of-concept.
What to do
If you run N-central on-prem, apply 2026.4 HF2 (or the build N-able lists for your train) before you put the server back on the network. Don’t bring an unpatched box online just because the cloud is back.
God Bless, and Happy hacking!
