New N-able "4EverAble2Shell" zero-day exploited hours after PoC released

Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company's latest security update.

Covered by 2 publishers within 11 hours of the first report.

Summary from BleepingComputer.

Reporting2

BC BleepingComputer New N-able "4EverAble2Shell" zero-day exploited hours after PoC released · Lawrence Abrams 2:51 PM

SW SecurityWeek Hackers Exploit New N-central Zero-Day Hours After PoC Publication · Ionut Arghire 2:20 AM

Related

SW Hackers Target N-central Zero-Days as N-able Rushes Patches November 12

BC Check Point warns of zero-day flaw exploited for root access November 13

SAF Google fixes Chrome’s eighth actively exploited zero-day of 2026 November 10

BC Zyxel fixes zero-day exploited to hack nearly 1,000 network switches November 4

Topics Zero-day vulnerabilitiesCrypto