GoKawiilN-able patches N-central zero-days after weekend disclosure forced outage
N-able released N-central 2026.4 HF2 to fix several zero-day vulnerabilities in its N-central remote monitoring platform, including critical bugs like RCE via path traversal, privilege escalation, SSRF and stored XSS. The flaws were publicly disclosed by an independent researcher late Sunday, prompting N-able to take all hosted N-central environments offline across the Americas, Europe, and Asia-Pacific while it developed fixes. N-able said all hosted servers have now been upgraded and urged on-premises customers to update immediately.