{"id":92384,"date":"2026-11-13T14:03:36","date_gmt":"2026-11-13T14:03:36","guid":{"rendered":"https:\/\/www.n-able.com\/?p=92384"},"modified":"2026-11-13T14:03:36","modified_gmt":"2026-11-13T14:03:36","slug":"new-security-update-on-n-central","status":"publish","type":"post","link":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central","title":{"rendered":"New Security Update on N-central"},"content":{"rendered":"<p>N-able continues to make progress toward the safe restoration of services and affected functionality. Our investigation into the recent N-central vulnerabilities remains a top priority, and we continue to adjust security protections based on our monitoring and the evolving threat landscape.<\/p>\n<p>As part of today\u2019s investigation, we identified Indicators of Compromise (IOCs) relevant only to customers who have not disabled the Legacy API. Customers can use the indicators below as part of their assessment and monitoring efforts.<\/p>\n<h2>Indicators of Compromise (IOC List)<\/h2>\n<p>Incoming URLs<\/p>\n<ul>\n<li>hxxp:\/\/157.20.241[.]16:8080\/jup.sh<\/li>\n<li>hxxp:\/\/157.20.241[.]16:8080\/xvgz<\/li>\n<li>hxxp:\/\/157.20.241[.]16:8080\/xmrig.tgz<\/li>\n<li>hxxp:\/\/157.20.241[.]16:8080\/ob\/cronhit?h=jup_start_&lt;rig&gt;&amp;persist=&lt;method&gt;<\/li>\n<li>hxxp:\/\/157.20.241[.]16:8080\/ob\/fcheck<\/li>\n<\/ul>\n<p>Outbound Traffic<\/p>\n<ul>\n<li>157.20.241[.]16 (ports 8080, 19202 to 19418)<\/li>\n<li>139.99.69[.]109:10128<\/li>\n<li>79.76.51[.]56:39100<\/li>\n<\/ul>\n<p>Our security assessment and remediation efforts are ongoing, with the protection of our customers and their environments as our highest priority.<\/p>\n<h2>Current Product Actions<\/h2>\n<ul>\n<li><strong>N-central Hosted customers<\/strong>\n<ul>\n<li><strong>N-able has applied these temporary protections directly to Hosted environments. No server-side action is required from Hosted customers.<\/strong><\/li>\n<li>Legacy API is turned off by default in the product.<\/li>\n<li>Intune integration has been turned off while additional protections are implemented and validated. This is a precautionary step.<\/li>\n<li>Hosted customers should continue to follow our previous guidance to upgrade Agents and Probes.<\/li>\n<\/ul>\n<\/li>\n<li><strong>N-central On-Premises customers<\/strong>\n<ul>\n<li><strong>Ensure Legacy API access is disabled in your environment.<\/strong><\/li>\n<li>Legacy API access is disabled by default.<\/li>\n<li>If you enabled it, follow these instructions: <a href=\"https:\/\/me.n-able.com\/s\/article\/How-to-Disable-Legacy-API-settings-on-On-premise-N-central-servers\">How to Disable Legacy API settings on On-Premises N-central servers<\/a><\/li>\n<li>As a precaution, if you are running the Intune integration, we have temporarily deactivated it for you. If we were unable to execute this, our support team will contact you directly by phone. This is a precautionary step.<\/li>\n<li>On-Premises customers should also continue to follow the previously communicated HF2 guidance, including upgrading their Agents and Probes.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>Setting the record straight<\/h2>\n<p><strong>Claims that N-able ignored responsible disclosure from the researcher are inaccurate.<\/strong> The new vulnerabilities that the researcher published on November 9 and November 12 were not responsibly disclosed through our established reporting channels. We maintain several reporting channels including an active bug bounty program specifically to enable security researchers to report potential vulnerabilities responsibly, and we work with researchers who use that process to investigate and address their findings.<\/p>\n<h2>What happens next<\/h2>\n<p>Our teams are actively assessing the new disclosures, developing additional remediation, and working to safely restore affected functionality. Protecting our partners and their customers remains our highest priority, and we will continue to take precautionary action where necessary.<\/p>\n<p><strong>We are continuing to monitor closely and will provide updates as needed.<\/strong><\/p>\n<h2>For more information:<\/h2>\n<ul>\n<li>Support: <a href=\"https:\/\/me.n-able.com\/s\/\">https:\/\/me.n-able.com\/s\/<\/a><\/li>\n<li>Uptime: <a href=\"https:\/\/uptime.n-able.com\/\">https:\/\/uptime.n-able.com\/<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>N-able continues to make progress toward the safe restoration of services and affected functionality. Our investigation into the recent N-central vulnerabilities remains a top priority, and we continue to adjust&#8230;<\/p>\n","protected":false},"author":24,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-92384","post","type-post","status-publish","format-standard","hentry","topic-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.8 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>New Security Update on N-central - N-able<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Security Update on N-central - N-able\" \/>\n<meta property=\"og:description\" content=\"N-able continues to make progress toward the safe restoration of services and affected functionality. Our investigation into the recent N-central vulnerabilities remains a top priority, and we continue to adjust...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central\" \/>\n<meta property=\"og:site_name\" content=\"N-able\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ThisIsNable\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T14:03:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/03\/share-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"N-able\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Nable\" \/>\n<meta name=\"twitter:site\" content=\"@Nable\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"N-able\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/blog\\\/new-security-update-on-n-central#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/blog\\\/new-security-update-on-n-central\"},\"author\":{\"name\":\"N-able\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#\\\/schema\\\/person\\\/f46a000e389b6d02bd4b3866e7828a7b\"},\"headline\":\"New Security Update on N-central\",\"datePublished\":\"2026-11-13T14:03:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/blog\\\/new-security-update-on-n-central\"},\"wordCount\":436,\"publisher\":{\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#organization\"},\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/blog\\\/new-security-update-on-n-central\",\"url\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/blog\\\/new-security-update-on-n-central\",\"name\":\"New Security Update on N-central - N-able\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#website\"},\"datePublished\":\"2026-11-13T14:03:36+00:00\",\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.n-able.com\\\/it\\\/blog\\\/new-security-update-on-n-central\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/\",\"name\":\"N-able\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#organization\",\"name\":\"N-able\",\"url\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.n-able.com\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/logo-n-able-vertical-dark.svg\",\"contentUrl\":\"https:\\\/\\\/www.n-able.com\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/logo-n-able-vertical-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"N-able\"},\"image\":{\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/ThisIsNable\",\"https:\\\/\\\/x.com\\\/Nable\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/n-able\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UClnp77HHg4aME-S-3fWQhFw\"],\"description\":\"N-able helps organizations achieve business resilience through an AI-powered cybersecurity platform that brings together a portfolio of integrated IT management, security, and data protection solutions, helping reduce risk and strengthen resilience across prevention, detection, response, and recovery.\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.n-able.com\\\/it\\\/#\\\/schema\\\/person\\\/f46a000e389b6d02bd4b3866e7828a7b\",\"name\":\"N-able\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c468b7c98137ecdd5508befa660c205a7978133257080a37fb0b1362d53411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c468b7c98137ecdd5508befa660c205a7978133257080a37fb0b1362d53411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c468b7c98137ecdd5508befa660c205a7978133257080a37fb0b1362d53411?s=96&d=mm&r=g\",\"caption\":\"N-able\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"New Security Update on N-central - N-able","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central","og_locale":"it_IT","og_type":"article","og_title":"New Security Update on N-central - N-able","og_description":"N-able continues to make progress toward the safe restoration of services and affected functionality. Our investigation into the recent N-central vulnerabilities remains a top priority, and we continue to adjust...","og_url":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central","og_site_name":"N-able","article_publisher":"https:\/\/www.facebook.com\/ThisIsNable","article_published_time":"2026-11-13T14:03:36+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/03\/share-image.jpg","type":"image\/jpeg"}],"author":"N-able","twitter_card":"summary_large_image","twitter_creator":"@Nable","twitter_site":"@Nable","twitter_misc":{"Scritto da":"N-able"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central#article","isPartOf":{"@id":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central"},"author":{"name":"N-able","@id":"https:\/\/www.n-able.com\/it\/#\/schema\/person\/f46a000e389b6d02bd4b3866e7828a7b"},"headline":"New Security Update on N-central","datePublished":"2026-11-13T14:03:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central"},"wordCount":436,"publisher":{"@id":"https:\/\/www.n-able.com\/it\/#organization"},"inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central","url":"https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central","name":"New Security Update on N-central - N-able","isPartOf":{"@id":"https:\/\/www.n-able.com\/it\/#website"},"datePublished":"2026-11-13T14:03:36+00:00","inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.n-able.com\/it\/blog\/new-security-update-on-n-central"]}]},{"@type":"WebSite","@id":"https:\/\/www.n-able.com\/it\/#website","url":"https:\/\/www.n-able.com\/it\/","name":"N-able","description":"","publisher":{"@id":"https:\/\/www.n-able.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.n-able.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.n-able.com\/it\/#organization","name":"N-able","url":"https:\/\/www.n-able.com\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.n-able.com\/it\/#\/schema\/logo\/image\/","url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg","contentUrl":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg","width":"1024","height":"1024","caption":"N-able"},"image":{"@id":"https:\/\/www.n-able.com\/it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ThisIsNable","https:\/\/x.com\/Nable","https:\/\/www.linkedin.com\/company\/n-able","https:\/\/www.youtube.com\/channel\/UClnp77HHg4aME-S-3fWQhFw"],"description":"N-able helps organizations achieve business resilience through an AI-powered cybersecurity platform that brings together a portfolio of integrated IT management, security, and data protection solutions, helping reduce risk and strengthen resilience across prevention, detection, response, and recovery."},{"@type":"Person","@id":"https:\/\/www.n-able.com\/it\/#\/schema\/person\/f46a000e389b6d02bd4b3866e7828a7b","name":"N-able","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c468b7c98137ecdd5508befa660c205a7978133257080a37fb0b1362d53411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c468b7c98137ecdd5508befa660c205a7978133257080a37fb0b1362d53411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c468b7c98137ecdd5508befa660c205a7978133257080a37fb0b1362d53411?s=96&d=mm&r=g","caption":"N-able"}}]}},"_links":{"self":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/posts\/92384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/comments?post=92384"}],"version-history":[{"count":0,"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/posts\/92384\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.n-able.com\/it\/wp-json\/wp\/v2\/media?parent=92384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}