N-able takes hosted N-central offline after vulnerability disclosure

N-able took its hosted N-central environment offline after a researcher publicly disclosed 33 zero-day vulnerabilities in the platform. The company declared an active incident on Monday at 15:15 UTC and strongly urged customers running N-central on their own premises to take their servers offline too. Managed security providers use N-central to administer customers' computers. Researcher Sean Bales said the disclosed vulnerabilities enable actions including credential theft, administrator creation and privileged remote code execution. N-able said it had seen no active exploitation and was working on a hotfix.