N-able has disclosed two flaws, 4EverAble2Shell and Agent2Shell, affecting N-central.
Attackers are chaining an Apache Axis vulnerability (CVE-2026-90436) with an N-central privilege escalation weakness to gain root/SYSTEM-level access.
Active exploitation is confirmed, with threat actors deploying XMRig Monero miners on servers in multiple countries.
Notably, 19 of 21 victims identified were already running a previous hotfix,…
https://en.hacks.gr/epitheseis-se-diakomistes-n-central-gia-egkatastasi-kryptonomismaton/