N-able has taken its cloud-hosted N-Central remote access service offline after security researcher Ben Bales published dozens of zero-day bugs on GitHub. In a status update the company said the hosted offering is now offline “while we take the necessary actions to secure the environments and implement appropriate remediation,” and it urged customers to shut down any self-hosted N-Central deployments. Bales labeled the flaws Able2Shell, describing them as a mix of vulnerabilities that can steal credentials, create new administrative accounts and gain root access to affected N-able systems. The researcher said he released the bugs publicly because the company allegedly failed to patch similar flaws reported in a different product. N-able said it has no evidence of successful exploitation and did not comment on its ability to check server logs. 1