CONNECT WITH US
Cyber Security

Cyber Security

Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2

The Hacker News logo

Published on

Add as a preferred source on Google
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2

N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell.

"We are restricting certain N-central features and integrations," the company said in a Thursday update. "These measures may affect some functionality, but we believe taking additional precautions while remediation is completed is the right action to protect our partners and their customers."

Hosted customers are also being recommended to follow N-able's previous guidance to upgrade Agents and Probes on N-central version 2026.4 HF1 and above, as the update introduces changes in how the Probe and Agent communicate.

"N-able N-central 2026.4 HF1 updates legacy components of the Agent and Probe, which changes how the two communicate," it said. "As such, upgrading both Agents and Probes in your N-central server is a MUST to ensure all managed devices are communicating and patched."

On-premises customers are being urged to upgrade Agents and Probes and ensure Legacy API access is disabled in the environment, if it has been previously turned on.

"Our teams are actively assessing the new disclosures, developing additional remediation, and working to safely restore affected functionality," N-able said. "Protecting our partners and their customers remains our highest priority, and we will continue to take precautionary action where necessary."

The development comes as independent security researcher Sean Bales disclosed two new sets of flaws called 4EverAble2Shell and Agent2Shell that work against the latest version of N-central and can allow attackers to execute arbitrary code as root and gain SYSTEM-level access to Windows systems under specific conditions.


Source link
Related Topics:Cyber Security

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.