New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

N-able on Thursday said it’s investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2.

« Based on our initial review, the server issue described depends on a non-default configuration in which the Legacy API is turned on and exposed to the public internet, » N-able said in a new advisory. « Legacy API is