November 09, 2026 - Started 1 day ago
- Lasted 1 day
Incident Report
Summary
AI Generated
N-able N-central experienced a critical security incident following the public disclosure of vulnerabilities by an independent security researcher, resulting in observed scanning activity using proof-of-concept exploit code. All hosted N-central environments were taken offline as a precautionary measure, and on-premises customers were advised to do the same, causing widespread loss of access to N-central management capabilities globally across Americas, Europe, and APAC regions. A hotfix was developed and nearing general availability after approximately 31.5 hours, with Ecoverse services such as Asset View, Patching, and Vulnerability Management remaining accessible as interim alternatives during the outage.
N-able is currently responding to the public disclosure of critical vulnerabilities in N-central by an independent security researcher.
**As expected, we are observing scanning activity associated with the published proof-of-concept code. At this time, we have no evidence that any customer environment has been successfully exploited. **
N-able Engineering continues to make progress on the N-central hotfix and associated validation activities. **The work remains on track with no setbacks, and our teams are progressing as quickly as possible while maintaining the validation required for a safe remediation. **
**ETA Timeline: Mid-day on November 10 (EST). We will continue to keep you updated. **
Our Security, Engineering, and Operations teams continue to actively monitor this activity, assess the disclosed vulnerabilities, and implement the necessary remediation.
**We continue to recommend that N-central remain offline until the hotfix is available and your server has been successfully upgraded. **
**N-central Hosted Environments Have Been Taken Offline **
As a precautionary measure, we have temporarily taken our Hosted N-central environments offline while we take the necessary actions to secure the environments and implement appropriate remediation.
During this time, customers will be unable to access their Hosted N-central classic environment, and associated services may be unavailable.
However, Ecoverse services available through N-able Login remain online, including Asset View, Patching, Vulnerability Management, scripting, policies, and tagging. Customers can access these services by logging in with their N-able Login account [](https://me.n-able.com/s/article/n-able-app-web-portal). This applies to both Hosted and On-Premises partners using N-able Login, with or without Entra ID integration.
We have also made several preview capabilities available to provide additional functionality for managing endpoints during this period:
* N-able.app is currently available
* Take Control from Asset View
* Preview: Windows Patching, on-demand only
**Action Required for N-central On-Premises Customers **
N-able strongly advises customers operating **On-Premises N-central servers to temporarily take their N-central servers offline and keep them offline until N-able provides further guidance confirming they can safely be brought back online. **
We recognize the significant operational impact these actions may have. We do not take this step lightly, but protecting our customers and their environments remains our highest priority.
We will provide additional updates and remediation instructions through this page as they become available.
Thank you for your immediate attention, patience, and cooperation.
**Timeline Notice Disclaimer:**
To provide customers with a single, consolidated source of information, N-able has created this new Uptime post to replace the previous N-central Critical Security Incident post. This post incorporates the guidance and updates previously communicated and will serve as the primary location for ongoing updates.
For continuity, updates from the previous post were provided at approximately: * **November 9 at 4:00 PM EST** * **November 9 at 7:00 PM EST** * **November 10 at 12:00 AM EST** * **November 10 at 4:30 AM EST**
All future updates will be provided through this post and will continue forward on our timeline once we have further developments.
N-able is nearing completion of final release validation, **bringing us closer to making the release available this afternoon.**
We appreciate your continued patience as we complete these final checks. We will provide another update as soon as General Availability is confirmed.
N-able continues to make strong progress toward General Availability of the release. Validation activities are progressing forward and **we are getting closer to making the release generally available this afternoon.**
We remain focused on completing the necessary validation to ensure the release is ready for deployment. We will provide another update as soon as General Availability is confirmed. We will make a new Uptime Post once we can announced Release General Availability with the appropriate upgrade guidance. Thank you for your understanding and patience.
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.