Outage in N-able
**N-central Critical Security Incident - 2026.4.1 HF2 Release**
Resolved Minor
November 12, 2026 - Started 1 day ago
- Lasted about 10 hours
Incident Report
Summary AI Generated
N-able identified a critical security vulnerability in N-central On-Premises version 2026.4.1 HF2, stemming from a non-default configuration where the Legacy API is enabled and exposed to the public internet. The issue affected on-premises deployments across Americas, APAC, and Europe regions, while hosted environments were not impacted. Customers with Legacy API enabled were directed to disable it immediately, with all other on-premises customers advised to confirm it remains disabled while N-able's Security and Engineering teams continued their assessment.
**N-central Critical Security Incident - 2026.4.1 HF2 Release**
N-able is investigating a new public disclosure containing claims of additional vulnerabilities in N-central On-Premises 2026.4.1 HF2.
Based on our initial review, the server issue described depends on a non-default configuration in which the Legacy API is turned on and exposed to the public internet. Legacy API is turned off by default in the product and is not recommended.
**N-central On-Premises Customers:**
* **If Legacy API is enabled:** Disable Legacy API now.
[How to disable Legacy API settings on On-Premises N-central servers](https://me.n-able.com/s/article/How-to-Disable-Legacy-API-settings-on-On-premise-N-central-servers)
* **All other customers:** Confirm that Legacy API is disabled.
**N-able N-central Hosted Customers:** Hosted environments are not affected by this issue.
Our Security and Engineering teams are assessing the claims, including which versions may be in scope. We will share findings, guidance, and any required customer actions on this page as they become available.
If you have any concerns, please reach out to support: https://me.n-able.com/
N-able is investigating a new public disclosure containing claims of additional vulnerabilities in N-central On-Premises 2026.4.1 HF2.
Based on our initial review, the server issue described depends on a non-default configuration in which the Legacy API is turned on and exposed to the public internet. Legacy API is turned off by default in the product and is not recommended.
**N-central On-Premises Customers:**
* **If Legacy API is enabled:** Disable Legacy API now.
[How to disable Legacy API settings on On-Premises N-central servers](https://me.n-able.com/s/article/How-to-Disable-Legacy-API-settings-on-On-premise-N-central-servers)
* **All other customers:** Confirm that Legacy API is disabled.
**N-able N-central Hosted Customers:** Hosted environments are not affected by this issue.
Our Security and Engineering teams are assessing the claims, including which versions may be in scope. We will share findings, guidance, and any required customer actions on this page as they become available.
If you have any concerns, please reach out to support: https://me.n-able.com/
Components affected
N-able N-central On-premise (Americas) N-able N-central On-premise (APAC) N-able N-central On-premise (Europe)Trusted by 1,000+ teams
The Status Page Aggregator with Early Outage Detection
Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.
Latest Updates ( sorted recent to last )
INVESTIGATING
Latest N-able outages
N-able® Cove Data Protection, All Regions - about 19 hours ago
N-able® N-ableMe All Regions - about 19 hours ago
N-able® Mail Assure and SpamExperts All Regions - about 19 hours ago
**November 12 Update: Critical N-central Security Update** - about 21 hours ago
**N-able® Billing System (All Regions)** - 2 days ago
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6320 services available
Integrations with
