N-able Update on the Global PHP Issue

N-able is aware of and tracking the recently disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting organizations worldwide, and we are treating it as a priority.

What we’re doing right now:

• We have declared emergency maintenance windows (uptime.n-able.com) for the following N-able products and updates are being applied in real time:
  • Take Control – Standalone and integrated with N-central and N-sight. This is limited to Take Control Session routing and does not expand into other areas of the product.
  • N-sight
  • Mail Assure / Spam Experts
  • Passportal

  All other products are not affected.

• Compensating controls to help prevent exploit attempts and additional monitoring are already in place to help manage risks while more comprehensive fixes and updates are being applied.
• We will update this post if we detect exploitation of these vulnerabilities. To date, we have not detected any exploitation within our product suite.
• Follow the N-able blog for more information around PHP Foundation guidance and for information about our Adlumin MDR platform response: PHP Foundation issues unusual advance notice for security patches. Here’s what to know.
• We will continue to provide updates throughout the day as we learn more. If you have questions or concerns in the meantime, please contact N-able Support: N-able Me.

Thank you for your patience and trust.