N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits

N-able has temporarily taken its N-central Hosted Environments offline and urged on-premises customers to shut down their servers following the public disclosure of 33 zero-day vulnerabilities collectively tracked as Able2Shell. Disclosed by independent researcher Sean Bales, the flaws affect N-able N-central Appliance version 2026.4.0.31 with proof-of-concept exploits. The vulnerabilities include remote code execution, directory traversal, and XML external entity injection, which could grant unauthorized root-level administrative access.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port module scans for externally exposed web interfaces and administrative portals, identifying reachable N-able N-central management interfaces and matching advertised version signatures against vulnerable releases like version 2026.4.0.31.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain