Linux Vulnerability – Important Update
Update: October 31, 2026 11:30 am ET
We are continuing to asses our products and environments for potential exposure to the recently disclosed Linux vulnerability. At this time, we have not seen any active exploits in any customer environments and are prioritizing our work to apply patches as soon as they are available from the vendor.
We will keep this blog updated with the latest information.
Current product status:
- Adlumin – Not impacted
- Cove – Mitigation applied; awaiting vendor patch
- N-central – Awaiting vendor patch
- N-sight – Awaiting vendor patch
- Mail Assure – Patch applied
- SpamExperts – Patch applied to hosted environments; local cloud customers need to reboot. (See instructions below.)
- Passportal – Awaiting vendor patch
- TakeControl – Patching in progress
Action required for SpamExperts Local Cloud customers
Please reboot each SpamExperts Local Cloud server as soon as possible. The updated kernel takes effect only after a reboot. Until each server is restarted, it remains on the vulnerable kernel.
Please complete these steps as soon as possible to ensure your infrastructure is secure.
- Confirm the update is present on each Local Cloud server:
dpkg -l | grep ii | grep linux-image | grep 6.1.190 - Reboot each server one at a time so your cluster continues filtering mail during the process.
- After each reboot, confirm the server is running kernel version 6.1.190 (
uname -v) and has rejoined the cluster before moving to the next server.
Original post
N-able is aware of CVE-2026-98432, a recently disclosed vulnerability affecting certain versions of the Linux kernel. We have been assessing our products and environments for potential exposure and are actively applying applicable security updates as they become available from our operating system vendors.
Systems supporting Take Control and Mail Assure are currently being patched. For Cove, N-central, N-sight, Passportal, Adlumin, and other potentially impacted products, we are awaiting applicable operating system vendor patches and will deploy them once available.
For SpamExperts Local Cloud, N-able has released an updated kernel package. Customers must reboot their servers for the updated kernel to take effect. Until each server is restarted, it will continue to run the previous kernel. Customers should reboot servers one at a time and verify that each server has successfully rejoined the cluster before proceeding to the next.
At this time, we have no evidence that this vulnerability has been exploited in N-able-hosted environments. We will continue monitoring vendor guidance, evaluating our products and infrastructure, and taking appropriate action as additional updates become available.
Customers with questions or who need assistance completing the recommended actions should contact N-able Support.
Please follow this blog for updates.
© N‑able Solutions ULC y N‑able Technologies Ltd. Todos los derechos reservados.
Este documento solo se proporciona con fines informativos. No debe utilizarse para obtener orientación legal. N‑able no ofrece ninguna garantía, implícita o explícita, ni asume ninguna responsabilidad legal o jurídica por la exactitud, integridad o utilidad de cualquier información contenida en este documento.
N-ABLE, N-CENTRAL y otras marcas comerciales y logotipos de N‑able son propiedad exclusiva de N‑able Solutions ULC y N‑able Technologies Ltd., y pueden ser marcas sujetas al derecho anglosajón, estar registradas o pendientes de registro en la Oficina de Patentes y Marcas de Estados Unidos o en otros países. El resto de marcas comerciales mencionadas en este documento solo se utilizan con fines de identificación y son marcas comerciales (o marcas comerciales registradas) de sus respectivas empresas.