N-able Issues Fourth Hotfix in Five Weeks for Unauthenticated RCE Flaw in N-central

N-able has released its fourth hotfix in five weeks for the N-central remote monitoring and management (RMM) platform, addressing an unauthenticated remote code execution (RCE) flaw. According to the company's incident notice, the vulnerability has been exploited in the wild. However, the release notes for Hotfix 4 state that exploitation is unconfirmed, creating a discrepancy in the urgency assessment.

The flaw affects all on-premises N-central builds below 2026.3.1.14. Notably, this includes servers that were updated to Hotfix 3 only a day earlier, which also require the latest Hotfix 4. N-able has not provided a detailed technical description of the vulnerability in the available reports, but the impact is described as potential unauthenticated remote code execution on affected servers.

The consecutive hotfixes indicate a rapid response cycle, though the conflicting statements regarding active exploitation create uncertainty for security teams assessing risk. Organizations are advised to prioritize upgrading to Hotfix 4 regardless of prior update status.