N-able, a global IT infrastructure management company, has taken its N-central platform offline following a researcher's public disclosure of 30 zero-day vulnerabilities without prior warning. The company has instructed customers running their own servers to keep them offline until further notice.
The vulnerabilities are severe, allowing attackers to bypass authentication mechanisms, expose credentials, and execute code remotely. The researcher disclosed the flaws without advance notification to N-able, citing the company's failure to patch two previously reported vulnerabilities over several months. According to BleepingComputer, this lack of response prompted the public disclosure.