CVE-2026-125881: N-able shuts down N-central, its remote management tool, after flaws were published without warning

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

N-able shuts down N-central, its remote management tool, after flaws were published without warning

New attack chains published on November 12 reportedly target even servers patched on the 10th. N-able is restricting some features while it waits for a new patch. Here is what to do and check.

Nov 12, 20264 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)