N-able restricts N-central features after researcher releases more exploits

Researcher Drops More Zero-Day Exploits for N-Able Software

Image: Primary

Published Saturday, November 14, 2026 · 3:18 PM EST

N-able restricted certain N-central features and integrations on Thursday after researcher Sean Bales released two additional exploit chains for its remote monitoring and management software, BankInfoSecurity reported. The restrictions may affect functionality while remediation continues. Bales said 4EverAble2Shell enables unauthenticated root access to a server. N-able said the server issue requires the non-default legacy API to be enabled and exposed to the internet; Bales subsequently confirmed that prerequisite. The vendor advised customers to disable the legacy API or confirm it is disabled. The Agent2Shell collection targets connected Windows agents and requires an endpoint's appliance ID, Bales said. WatchTowr reported probes for 4EverAble2Shell, while N-able said it had seen no signs of compromise.

Sources

BankInfoSecurity

In this story

Microsoft

Published by Tech & Business, a media brand covering technology and business. This story was sourced from BankInfoSecurity and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Products AI

Databento raises $100M Series C at $1.1B valuation

Databento raised a $100M Series C at a $1.1B valuation, FinTech Global reported. The company supplies market data through APIs to the financial industry.

Security

Fullerton Health says breach compromised about 140,000 work pass records

Fullerton Health said on November 14 that about 140,000 work pass holder records were compromised in a breach of its Migrant Worker Primary Care Plan programme in Singapore. About 43,000 records belonged to people whose work passes were no longer valid, CNA reported.

Capital

Tendrils raises $30M for CPU architecture with thousands of parallel cores

Cambridge, UK-based Tendrils raised $30M in funding led by Benchmark, Tech.eu reported. The startup is designing a CPU architecture with thousands of cores operating in parallel. Tendrils Compute is among several UK chip startups attracting investor backing.

AI Capital

Luminal raises $25 million Series A led by Standard Capital

Luminal raised a $25 million Series A led by Standard Capital, CEO Joe Fioti told Axios Pro. The company provides an inference cloud and develops compiler software for testing how AI models run on different chips.

Capital AI

WhiteMatter raises $20 million Series A for AI agent oversight

WhiteMatter raised a $20 million Series A, Business Insider reported. Founded in 2024, the startup builds AI agents designed to oversee other AI agents, monitoring their file access, software use, decision making, and actions. It calls these oversight systems "guardian" agents.

Policy Products

Italian privacy authority fines Meta €805 million over gallery access

The Italian Data Protection Authority imposed a fine of €805 million ($887 million) on Meta Platforms Inc. The penalty concerns Meta's access to photos and videos in the galleries of Android users without those users' explicit consent.