# Researchers report 21 N-central servers compromised through new exploit

_Published Thursday, November 12, 2026 at 3:19 PM EST · Security · Latest · Tier 1 — Major_

![Researchers report 21 N-central servers compromised through new exploit — Primary](https://www.bleepstatic.com/content/hl-images/2025/08/18/N-able.jpg)

Attackers have compromised at least 21 production N-able N-central servers through a newly disclosed exploit chain, security company Huntback told BleepingComputer. Nineteen ran the latest Hotfix 2 release, issued November 10. The attacks installed XMRig cryptocurrency miners.

The 4EverAble2Shell chain gives unauthenticated attackers root access when Legacy API functionality is enabled. N-able has urged customers to disable that access and disabled its Intune integration as a precaution while developing further fixes. Its advisory said it had seen no compromise using the new flaws; researchers subsequently reported successful exploitation.

## Sources

- [Bleeping Computer](https://www.bleepingcomputer.com/news/security/new-n-able-4everable2shell-zero-day-exploited-hours-after-poc-released/)

---
Canonical: https://techandbusiness.org/newswire/EF_3HBjuPn9MLqR41CmL-G
Published: 2026-11-12T20:19:47.952Z
Story chronology: 2026-11-12T19:51:16.000Z
Retrieved: 2026-11-12T22:07:37.524Z
Publisher: Tech & Business (techandbusiness.org)