#N-able
All CosmicBytez Labs articles tagged #N-able, across news, security advisories, how-to guides, and projects.
- News
N-central '4EverAble2Shell' Exploited Within Hours: Cryptominers on 21 Servers, 19 Fully Patched
New: N-able N-central exploit chain is now used in attacks. Huntback found 21 servers running XMRig miners, 19 on the latest hotfix. Check the Legacy API.
- News
N-able Releases Hotfixes for N-central Zero-Days After PoC Exploits Go Public
N-able took hosted N-central offline and shipped 2026.4 HF2 after a researcher published PoC exploits for 30+ flaws. On-prem customers should upgrade now.
- News
N-able Patches Max-Severity N-central RCE Amid Live Attacks
N-able rushed out N-central Hotfix 4 for CVE-2026-86218, a 10.0 pre-auth RCE, after Huntress flagged signs of related exploitation.
- News
Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack, and More
This week's roundup: a sixth Chrome zero-day, mass MikroTik router hijacking, a Coder registry compromise, and N-able's third N-central RCE.
- News
China-Linked Storm-1175 Deploys StormEncryptor Ransomware via Critical N-central Flaw
Microsoft tracks Storm-1175 pivoting from Medusa ransomware to a new strain — StormEncryptor — exploiting an N-able N-central authentication bypass that...
- News
China-Linked Storm-1175 Turns N-able N-central Into MSP Ransomware Launchpad
Microsoft warns that the China-linked threat actor Storm-1175 is exploiting a critical zero-day in N-able N-central (CVE-2026-18577) to gain god-mode...
- News
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
N-able has released a mandatory second hotfix for N-central after attackers exploiting CVE-2026-18556 and CVE-2026-18577 pivoted through Take Control to...
- News
CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited
CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on August 5, 2026 — a critical Langflow RCE, an Apache Tomcat encryption...
- Security
CVE-2026-18577: N-able N-central Authentication Bypass and Account Takeover
N-able N-central contains an authentication bypass via alternate path vulnerability enabling full account takeover, added to CISA KEV as an incomplete...