Critical zero-day RCE in N-able N-central forces global platform shutdowns

N-able was forced to take its hosted N-central remote monitoring and management (RMM) platforms offline globally after multiple zero-day vulnerabilities were publicly disclosed over the weekend. The flaws—which include critical remote code execution (RCE), privilege escalation, and injection bugs—affect the core software used by IT departments and managed service providers (MSPs) to centrally manage client networks and devices. Hotfixes have now been released as N-central 2026.4 HF2, patching vulnerabilities such as CVE-2026-125882 (RCE via file upload path traversal) and CVE-2026-125878 (OGNL injection). N-able has restored its hosted environments but strongly urges all on-premises customers to upgrade immediately. Attackers are already scanning for vulnerable instances, making this a critical, time-sensitive patch for any organization using N-central.

What to do: Upgrade N-central on-premises installations to version 2026.4 HF2 immediately.