N-able suspends hosted N-Central access after researcher discloses vulnerabilities

N-able has taken its hosted N-Central remote access service offline after security flaws were published online without advance notice, saying it needs to secure affected environments and apply fixes. The move matters because N-Central lets organisations remotely manage devices across their networks, and the disclosed flaws could give attackers broad access.

The company has also urged customers to take down self-hosted N-Central deployments, and says customers cannot use the service while it is offline. Researcher Ben Bales published the bugs on GitHub on Sunday, describing vulnerabilities that could expose credentials, create administrator accounts and provide root access. N-able says it has no evidence that customer systems were successfully exploited; a spokesperson did not clarify whether the company can check its server logs.