Active Incident

Updated a few seconds ago

N-central Critical Security IncidentPartial Service Disruption

Incident Status

Partial Service Disruption

Components

N-central Server

Data Center

Primary-CDC, Secondary-RDC


November 10, 2026 5:12PM EST
MONITORING

The update released by the vendor to fix the disclosed vulnerabilities was applied successfully. However, due to the nature of vulnerability research we expect there may be additional related vulnerabilities found in the near future. Out of an abundance of caution we plan to continue restricting access to the N-central server from the full internet at this time. We will re-evaluate this decision towards the end of the week. Please contact us if there is a known location with a static public IP address where devices are not able to reach the server.

November 10, 2026 4:08PM EST
MONITORING

We have received the N-central security patch and will be applying it shortly. We will provide an update once the installation is complete.

November 10, 2026 9:07AM EST
MONITORING

Our on-premise N-central server remains online but only reachable by limited sources from client locations and trusted personnel. As expected, N-able observed scanning activity associated with the published proof-of-concept code. At this time, they have no evidence that any customer environment has been successfully exploited. N-able Engineering continues to make progress on the N-central hotfix and associated validation activities. The work remains on track with no setbacks, and teams are progressing as quickly as possible while maintaining the validation required for a safe remediation. ETA Timeline: Mid-day on November 10 (EST). We will continue to keep you updated.

November 9, 2026 2:59PM EST
MONITORING

We returned the N-central server back online, but only from trusted locations. Our firewall will block connections from everywhere else. Endpoint Agents and admins located at known sites can now contact the server.

November 9, 2026 2:02PM EST
INVESTIGATING

N-able is currently responding to a public disclosure of critical vulnerabilities in N-central. At this time, we have they have not seen any active exploitation of these vulnerabilities. As a precautionary measure, N-able strongly recommends we temporarily take our N-central server offline until we can take the necessary actions to secure the environment and implement appropriate remediation.

Data Center Colocation




Operational

IaaS




Operational

Management Interface




Operational

N-central Server




Partial Service Disruption

Internet




Operational

IaaS Citrix Gateway




Operational

BaaS




Operational

1

Upcoming Maintenances

3

Incidents Last 30 Days

5

Maintenances Last 30 Days

Scheduled Maintenance

IaaS XenServer Update Primary DCPlanned Maintenance

Schedule

November 15, 2026 7:00AM - 12:00PM EST

Components

IaaS

Data Center

Primary-CDC

Description

(This is a re-creation of the maintenance window originally sent on Nov. 5th that was incorrectly canceled on Nov. 10th.) Affected Equipment: XenServer Hosts in Primary (Chantilly, VA) Data Center. Type of Work: We intend to apply vendor supplied software updates to the XenServer hosts located in our primary Data Center. This update has already passed internal QA tests having been installed on other, non-production, systems. Expected Impact: This maintenance is expected to impact service levels of systems that either have outdated tools or no tools installed. This maintenance is not expected to impact service levels of the affected systems during the maintenance window if guest tools are up to date. You are encouraged to test all critical functions that rely on the affected services at the completion of the maintenance window. Maintenance Support: We are available to support your testing for one hour after the maintenance window ends. For support, please call 888-373-2226.

History (Last 7 days)

IaaS Xen Orchestra UpdatePlanned Maintenance

Description

We intend to apply vendor-recommended software updates to improve and maintain Xen Orchestra security and functionality. Expected Impact: The Xen Orchestra web interface will be inaccessible for the duration of the maintenance window. This will temporarily affect virtual machine management activities performed through Xen Orchestra, including VM provisioning, power operations, snapshots, and console access. Integrations that rely on the Xen Orchestra API may also be temporarily impacted. We do not expect any impact to the normal operation or availability of running virtual machines during this maintenance. Maintenance Support: We are available to support your testing for one hour after the maintenance window ends. For support, please call 888-373-2226.


Components

IaaS


Data Center

Primary-CDC, Secondary-RDC


Schedule

November 10, 2026 6:00PM - November 10, 2026 8:00PM EST


November 10, 2026 1:20PM EST
UPDATE

We are canceling this maintenance window because the the intended Xen Orchestra software update was installed as part of the emergency update performed at noon today.
IaaS XenServer Update Primary DCPlanned Maintenance

Description

Affected Equipment: XenServer Hosts in Primary (Chantilly, VA) Data Center. Type of Work: We intend to apply vendor supplied software updates to the XenServer hosts located in our primary Data Center. This update has already passed internal QA tests having been installed on other, non-production, systems. Expected Impact: This maintenance is expected to impact service levels of systems that either have outdated tools or no tools installed. This maintenance is not expected to impact service levels of the affected systems during the maintenance window if guest tools are up to date. You are encouraged to test all critical functions that rely on the affected services at the completion of the maintenance window. Maintenance Support: We are available to support your testing for one hour after the maintenance window ends. For support, please call 888-373-2226.


Components

IaaS


Data Center

Primary-CDC


Schedule

November 15, 2026 7:00AM - November 15, 2026 12:00PM EST


November 10, 2026 1:13PM EST
UPDATE

We are canceling this maintenance because the the intended software update was installed as part of the emergency update performed at noon today.
Emergency update for Xen OrchestraPartial Service Disruption

Incident Status

Partial Service Disruption


Components

IaaS


Data Center

Primary-CDC, Secondary-RDC



November 10, 2026 1:12PM EST
RESOLVED

We applied the update that addresses the critical vulnerability. Xen Orchestra will remain IP restricted to known client sites and trusted personnel as it was previously.

November 10, 2026 11:27AM EST
IDENTIFIED

We were made aware that Xen Orchestra (XO) contains a critical vulnerability that is being actively exploited. The vendor, Vates, released a fix that we intend to install at 12:00 PM EST. We restrict access to XO for precisely this reason. The website is restricted to known customer locations and trusted personnel. There is no direct threat of active exploitation. However, we will install the patch quickly out of an abundance of caution. The update only affects the management UI https://xo.atisolutions.com which will be unavailable for up to 15 minutes. Client virtual machines will not experience any impact.
Emergency N-Central Software Update Planned Maintenance

Description

Affected Equipment: N-central server and Take Control Remote Access. Type of Work: We intend to apply an emergency vendor supplied software update to the N-central system. Expected Impact: This maintenance is expected to impact service levels of the affected systems during the maintenance window. You are encouraged to test all critical functions that rely on the affected services at the completion of the maintenance window. Maintenance Support: We are available to support your testing for one hour after the maintenance window ends. For support, please call 888-373-2226.


Components

N-central Server


Data Center

Primary-CDC, Secondary-RDC


Schedule

November 9, 2026 8:00PM - November 9, 2026 11:00PM EST


November 9, 2026 11:00PM EST
UPDATE

Scheduled maintenance is complete.

November 9, 2026 8:00PM EST
UPDATE

Scheduled maintenance is starting.
IaaS XenServer Update Secondary DCPlanned Maintenance

Description

Affected Equipment: XenServer Hosts in Secondary (Rockville, MD) Data Center. Type of Work: We intend to apply vendor supplied software updates to the XenServer hosts located in our secondary Data Center. This update has already passed internal QA tests having been installed on other, non-production, systems. Expected Impact: This maintenance is expected to impact service levels of systems that either have outdated tools or no tools installed. This maintenance is not expected to impact service levels of the affected systems during the maintenance window if guest tools are up to date. You are encouraged to test all critical functions that rely on the affected services at the completion of the maintenance window. Maintenance Support: We are available to support your testing for one hour after the maintenance window ends. For support, please call 888-373-2226.


Components

IaaS


Data Center

Secondary-RDC


Schedule

November 9, 2026 7:00AM - November 9, 2026 12:00PM EST


November 9, 2026 12:00PM EST
UPDATE

Scheduled maintenance is complete.

November 9, 2026 7:00AM EST
UPDATE

Scheduled maintenance is starting.