GoKawiilN-able shuts down N-central cloud after researcher publishes 30+ exploits
N-able took its hosted N-central environments offline and told on-premises customers to shut down their servers after researcher Sean Bales published over 30 alleged zero-day vulnerabilities on GitHub. The flaws, found in a pre-release build of N-central but believed to affect earlier versions too, include authentication bypasses, remote code execution, and an XXE exploit chain that can create a rogue administrator account. Bales says the vulnerabilities were discovered with AI assistance and posted proof-of-concept code in a repository called Able2Shell.