N-able shuts down cloud platform after researcher publishes over 30 alleged zero-day exploits

N-able has taken its N-central remote monitoring and management platform completely offline globally after security researcher Sean Bales publicly disclosed more than 30 alleged zero-day vulnerabilities. The researcher published proof-of-concept exploits on GitHub under 'Able2Shell', including authentication bypasses, credential theft, and remote code execution flaws, with one critical chain allowing attackers to create rogue administrator accounts and execute commands on vulnerable servers.

For MSPs and IT teams using N-central, this represents an immediate operational crisis: hosted environments are down worldwide, and on-premises customers are being told to shut down servers. The most critical exploit demonstrated creates admin accounts and executes commands without authentication, meaning unpatched systems are actively vulnerable to takeover. Given that RMM platforms have direct access to customer networks, this disclosure requires urgent attention from anyone using this software.