# N-able restricts N-central features after researcher releases more exploits

_Published Saturday, November 14, 2026 at 3:18 PM EST · Security · Latest · Tier 2 — Notable_

![Researcher Drops More Zero-Day Exploits for N-Able Software — Primary](https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/researcher-drops-more-zero-day-exploits-for-n-able-software-image_large-5-a-33374.jpg)

N-able restricted certain N-central features and integrations on Thursday after researcher Sean Bales released two additional exploit chains for its remote monitoring and management software, BankInfoSecurity reported. The restrictions may affect functionality while remediation continues.

Bales said 4EverAble2Shell enables unauthenticated root access to a server. N-able said the server issue requires the non-default legacy API to be enabled and exposed to the internet; Bales subsequently confirmed that prerequisite. The vendor advised customers to disable the legacy API or confirm it is disabled.

The Agent2Shell collection targets connected Windows agents and requires an endpoint's appliance ID, Bales said. WatchTowr reported probes for 4EverAble2Shell, while N-able said it had seen no signs of compromise.

## Sources

- [BankInfoSecurity](https://www.bankinfosecurity.com/researcher-drops-more-zero-day-exploits-for-n-able-software-a-33374)

---
Canonical: https://techandbusiness.org/newswire/HLVHCYqbnDSGwxLQzmOjXc
Published: 2026-11-14T20:18:23.209Z
Story chronology: 2026-11-12T00:00:00.000Z
Retrieved: 2026-11-15T01:02:19.044Z
Publisher: Tech & Business (techandbusiness.org)