CriticalVulnerabilityActiveMedia reportedExploitedNo patch· updated Nov 11
Researcher dumps exploits for 30+ N-central flaws; N-able shuts hosted environments worldwide and tells on-prem customers to pause servers
BleepingComputer reports that researcher Sean Bales publicly disclosed more than 30 N-able N-central vulnerabilities on Nov 8 without notifying the vendor and released proof-of-concept exploits in a GitHub repository called Able2Shell, the most critical chain using an unauthenticated XXE flaw to run commands on the server and create an admin account .