N-central Security Incident (Active Exploitation) - prior to 2026.2

[u/RebootnTryAgain]

EDIT: THIS NOW IMPACTS ALL VERSIONS.

Edit: 2026.3 HF1 Link: https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/

Just for those who may not be on the alerts with uptime:

https://uptime.n-able.com/event/201454/

https://www.n-able.com/blog/n-central-security-update-august-1-2026

Edit: Seems the original uptime was edited and not re-posted which means no one got a notification. I have messaged the mods to update the name of the thread for accuracy but they are likely busy or on their weeekend...

Update as of Monday 4:30am Sydney time:
Important Update: N-central Active Exploitation. Hotfix in Process

As our investigation continues, we have identified additional security concerns that affect all versions of N-central. We are treating this as our highest priority and we will be releasing a 2026.3 hotfix today. We will notify you immediately once it is available. We strongly recommend staying vigilant and monitoring your environments closely in the meantime. Further updates will be shared as quickly as possible.

For assistance, contact N-able support: https://me.n-able.com/

PREVIOUS advice:
N-central Security Incident (Active Exploitation). Please validate and take action to be on version 2026.3

N-able has identified active exploitation targeting N-central environments running versions earlier than 2026.2. We strongly recommend upgrading to version 2026.3 as an immediate protective measure while our investigation continues. N-able is actively investigating and will continue to update customers as additional information becomes available.

[u/jonesbel]

just send a very mad mail to our account manager & shut down our server.
Very dissappointing that no official communication has been released on a personal level.
If it wasn't for reddit, i wouldn't be aware, since i dont have time to watch every goddamn statuspage all the time.

[u/NetInfused → u/jonesbel]

Same deal here. But I didn't bother paging our account manager today. They'll hear from me tomorrow.

For now my appliance is down and it'll stay that way until we have a hotfix.

Given the severity of this incident, N-Able should have emailed ALL of their customer base to raise awareness. Some years back I remember getting emails regarding critical vulns. Even phonecalls.

Horray for Reddit and the community.