N-able restores hosted N-central after security hotfix

N-able has restored its hosted N-central remote monitoring systems after taking them offline in response to public disclosure of vulnerabilities, and says on-premises customers should install an emergency hotfix before reconnecting their servers to the internet.

The company released N-central 2026.4 HF2 on Tuesday, November 10, and said its hosted environments had been upgraded and returned to service. N-able had taken those systems offline as a precaution while it prepared a fix. The disruption lasted roughly a day, according to the company’s subsequent update.

N-able said the update addresses seven Common Vulnerabilities and Exposures, or CVEs. Huntress separately described 33 critical-severity vulnerabilities affecting N-central Appliance 2026.4.0.31 and likely earlier versions. Huntress said the flaws could be combined into four exploit chains: three enabling remote code execution and one allowing privilege escalation to root. The figures describe different scopes in the reporting and are not presented as equivalent totals.

For organizations running N-central on their own servers, N-able advised applying the hotfix before restoring normal internet access. The company’s...