N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

In Brief Posted: 7:45 AM PST · November 10, 2026 Zack Whittaker N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs Remote access company N-able has confirmed it took down its cloud-hosted offering to fix a slew of security vulnerabilities that were published online this week, giving the company no advance notice to fix them. In a status update on its website, the company said its hosted N-Central offering for customers is now offline “while we take the necessary actions to secure the environments and implement appropriate remediation.” The company also urged customers to take down their own self-hosted deployments of N-Central, fearing that attackers could use the publicly disclosed exploits to hack into customer networks. N-able said during this time customers will not be able to use their N-Central service, which allows corporate customers to remotely access and manage other devices and systems on the same network. Remote access technologies are a frequent target of hackers, as these systems can grant vast access to a company’s network and internal data. Security researcher Ben Bales released the “zero-day” bugs on GitHub on Sunday. In a post on X , Bales dubbed the bugs Able2Shell, describing them as a mix of vulnerabilities capable of stealing credentials, creating new administrative accounts, and gaining root access to affected N-able systems. Bales told Bleeping Computer that he publicly released the bugs as the company allegedly failed to patch the flaws reported in a different product. N-able said that it has no evidence of successful exploitation against any of its customer environments. A spokesperson for the company did not respond to a request for comment about whether it has the ability to check, such as server logs, or if it has no way to check. Topics cyberattack , cybersecurity , n-able , remote access , Security 2027 San Francisco Get an Early Peek at the Next TechCrunch Disrupt Disrupt, Startup Battlefield, and more will return next year, and you can be at the front of the line. Sign up for our waitlist Register Now Newsletters See More Subscribe for the industry’s biggest tech news TechCrunch Daily News Every weekday and Sunday, you can get the best of TechCrunch’s coverage. TechCrunch Mobility TechCrunch Mobility is your destination for transportation news and insight. Startups Weekly Startups are the core of TechCrunch, so get our best coverage delivered weekly. StrictlyVC Provides movers and shakers with the info they need to start their day. No newsletters selected. Subscribe By submitting your email, you agree to our Terms and Privacy Notice . Related AI Meta’s AI agent Muse lands on Apple Watch and Android Wear OS Aisha Malik 16 minutes ago Commerce Reddit is turning user conversations into AI-powered product reviews Sarah Perez 46 minutes ago Apps New WhatsApp head wants to make the app easier to use, give its AI more chops Ivan Mehta 46 minutes ago Latest in Security In Brief N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs Zack Whittaker 8 seconds ago AI Cyberattacks threaten to make open-source AI a little less open, Hugging Face exec warns Rebecca Bellan 3 hours ago Security Hotel giant Wyndham exposed customer data after app security lapse Zack Whittaker 17 hours ago