N-able released a hotfix for N-central that fixes seven CVEs after a researcher published proof-of-concept code for 33 alleged zero-day vulnerabilities. The researcher says one attack chain needs no credentials. Key TakeawaysAble2Shell is a set of 33 alleged vulnerabilities in N-able N-central, published with proof-of-concept code.
Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities
About this summary. This is a short excerpt from the description that Tenable published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.tenable.com/blog/able2shell-frequently-asked-questions-for-reported-n-able-n-central-zero-day-vulnerabilities
Source attribution: headline and facts are from Tenable (tenable.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week…
CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day
Google has patched CVE-2026-125350, a high-severity use-after-free in Chrome’s XML handling that attackers are already exploiting. The fix landed in the Stable channel…
Google Chrome Patches Eighth Zero-day Vulnerability of the Year (CVE-2026-125350)
Google released security updates to address nine vulnerabilities impacting the Chrome browser. One of these vulnerabilities, tracked as CVE-2026-125350, is being…
An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones
Criminals are using leaked exploit kits to break into vulnerable iPhones, according to iVerify’s 2026 Advanced Mobile Threat Report. Attacks delivered through ads and…
Sable: A Small-Field Sumcheck Argument for Bit-Exact Inference of Large Language Models
arXiv:2611.14083v1 Announce Type: new Abstract: We present Sable, an argument system and single-GPU prover for the statement that a committed, integer-quantized…
An Empirical Study on CVE-based Vulnerabilities Propagation from one System to another System (IntraProject vs InterProject)
arXiv:2611.14164v1 Announce Type: new Abstract: Vulnerabilities in applications, including browsers, media players, online services and document readers, etc. are often…