thehackernews.com
Nov 13, 2026
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
AI-summarised brief · reviewed before publication
N‑able announced that newly disclosed vulnerabilities, 4EverAble2Shell and Agent2Shell, enable attackers to gain root access on N‑central servers. The flaws combine a critical Apache Axis flaw (CVE‑2026‑90436) with a privilege‑escalation weakness, allowing execution of arbitrary commands. Huntback reported that threat actors used the chain to deploy a Monero miner on 21 servers, 19 of which were already running Hotfix 2. N‑able is restricting features, urging upgrades to Agents and Probes, and disabling legacy API access to mitigate the risk.
💡 Why It Matters
- · The exploit chain demonstrates that even patched systems can be compromised if ancillary components remain vulnerable, underscoring the need for comprehensive, layered security updates.
