ETK-2026-3993Zero's internal tracking ID, independent of the CVE number.
waiting for further signalsZero needs more public information before it can validate it.description
N-able N-central is affected by a disclosed issue that may allow remote command execution on vulnerable deployments. An attacker could potentially gain broad control through the RMM platform; the available evidence does not establish whether authentication or another condition is required.
mitigation
Limit N-central administrative access to trusted networks and restrict exposure to the internet while applying N-able's current security guidance. Confirm hosted-environment status with N-able; the supplied evidence does not identify a fixed version.
outcome
Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-11-09 21:26Zbleepingcomputer: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/ETK-2026-3993
{ "etk_id": "ETK-2026-3993", "cve_id": null, "display_id": "ETK-2026-3993", "ghsa_id": null, "euvd_id": null, "status": "published", "anchor_state": "awaiting_cve", "title": "Remote command execution in N-central", "summary": "N-able N-central is affected by a disclosed issue that may allow remote command execution on vulnerable deployments. An attacker could potentially gain broad control through the RMM platform; the available evidence does not establish whether authentication or another condition is required.", "mitigation": "Limit N-central administrative access to trusted networks and restrict exposure to the internet while applying N-able's current security guidance. Confirm hosted-environment status with N-able; the supplied evidence does not identify a fixed version.", "vendor": "N-able", "product": "N-central", "affected": [], "cwes": null, "cvss_score": null, "cvss_src": null, "cvss_vector": null, "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 9.690451216666666, "t0_at": null, "signals": { "trigger_signal": { "at": "2026-11-09T21:26:25+00:00", "days": -1.3885078903935184, "is_lower_bound": true, "measured_at": "2026-11-11T06:45:52.137408+00:00", "url": "https://www.bleepingcomputer.com/news/security/n-able-takes-cloud-platform-offline-after-30-plus-zero-days-published/" } } }
published 2026-11-09 21:38Z
last change 2026-11-11 06:19Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.