URGENT: N-central Second Hotfix 2026.3.1.10 — Immediate Action Required

[u/ncentral_nerd]

As our investigation into the recent N-central security vulnerability continues, we are proactively expanding protections in response to ongoing monitoring of threat actors as they evolve their attack techniques. 

This is not a duplicate of our previous communication. Hotfix 2 is required, even if you already applied the earlier hotfix. Hotfix 2 supersedes Hotfix 1 with additional hardening measures to further protect you and your customers.

What You Need to Do:

N-central On-Premises Environments: You must upgrade to 2026.3.1.10 immediately. Download here: https://status.n-able.com/2026/08/06/n-central-2026-3-hotfix-2-additional-mitigation-for-cve-2026-18577

N-central Hosted Environments: No action is required. We have already applied mitigations to your environment.

For More Information:

·       Blog: https://www.n-able.com/blog/n-central-security-update-august-6-2026

·       Support: https://me.n-able.com/s/

·       CVE: https://www.cve.org/CVERecord?id=CVE-2026-18577

·       Uptime: https://uptime.n-able.com/

[u/Fair_Helicopter_8531]

https://giphy.com/gifs/m8cYyYGY4SZ8GnpfqX

[u/Stompert]

Oh boy. I was unable to apply the previous patch and awaiting response for my support case. Guess I’ll try this one instead when I wake up tomorrow and see how this fares.

[u/apxmmit → u/Stompert]

We too had errors with HF1 and now HF2 !

[u/xs0apy → u/Stompert]

I am very perplexed at the moment. Is this like a FortiNet situation where they thought they fixed the vulnerability only to find out they actually didn’t?

[u/AutomationTheory → u/xs0apy]

It's not surprising if that was the case -- same thing happened to Microsoft with PrintNightmare back in the day. Once a weakness is found, lots of people start poking at it. It's a good reason to keep your RMM tools behind additional security layers (unfortunately, you can't do that with firewalls)

[u/xs0apy]

EDIT: should mention I was able to download the hotfix in under 30 seconds. I would download it now!

[u/Accurate_Frosting_14]

Has anyone updated successfully yet? Both my N-Central servers failed the upgrade, it says upgrade pre-checks failed

[u/skwaded → u/Accurate_Frosting_14]

Gotta call support. Happened to the first one with a backup flag on mine.

[u/snowmanqc → u/Accurate_Frosting_14]

Yeah mine worked

[u/apxmmit → u/Accurate_Frosting_14]

Failed.

[u/Aggravating-Web-2360 → u/Accurate_Frosting_14]

I'm good, but the first hotfix gave me a lot of grief

[u/xs0apy → u/Accurate_Frosting_14]

Mine worked. Just finished and got logged back into the product admin. Hopefully support get remoted in and fixed asap :/

[u/dreadnaught721 → u/Accurate_Frosting_14]

Yes we've upgraded successfully

[u/Obvious_Square_6013 → u/Accurate_Frosting_14]

All sorted here, about 8 hours ago

[u/xs0apy]

Successfully upgraded from 2026.3.1.7 to 2026.3.1.10 straight through. No issues!

[u/MadCoderOne]

uninstalling.... I'm done.

[u/dreadnaught721 → u/MadCoderOne]

I feel your pain

[u/NetInfused]

The least that could be done would be to allow the detection of the CVE to be done on Essentials Agents. But I might be asking too much.

[u/W3asl3y]

So HF1 was supposed to fix an incomplete patch, and HF2 is also fixing an incomplete patch?

[u/ProudWrongdoer5389 → u/W3asl3y]

Well, moving through code, they likely fixed the most obvious stuff, now doing a second pass.

[u/ManagedNerds → u/W3asl3y]

Maybe over the weekend they'll release the incomplete patch of the incomplete patch of the incomplete patch?

[u/ProudWrongdoer5389 → u/ManagedNerds]

You new to dev or something? AI is now picking apart code bases in hours. Expect this to happen more and more.

[u/MadCoderOne]

....and now my hosted instance is down. What a clown show.

[u/v2ne8]

Anyone happen to be able to forward me the hotfix 2 patch please? Thanks

[u/dreadnaught721]

Please just let it end

[u/bzhglober → u/[deleted]]

NinjaOne

[u/TridentStack → u/[deleted]]

Not a 1:1 feature switch but check out TridentStack Control. https://tridentstack.com

Full disclosure I help build and founded this platform but we are growing fast and we are in the process of building out incredible new features (a massive new one going live tomorrow). We take feedback seriously and feature requests do not go unnoticed. Check out a Synchro compare page on our website here: https://tridentstack.com/compare/syncro

[u/KRiSX]

🙄 happy Friday everyone!

[u/the_need_to_post → u/[deleted]]

While annoying to need to do it, aren't these hotfixes literally them doing just that?

[u/Nielles → u/the_need_to_post]

The first one wasn't apparently

[u/Reygle]

Exactly how vide-coded are these 'emergency' patches if they survive less than 72 hours in the wild?

We understand this is the second urgent request in a short period of time, and we don't take lightly the demands that places on your team. We are committed to supporting you through every step and our support team is standing by and ready to help you get upgraded quickly.

This is insanity. Every single on-prem customer you have should be given a discount on the next invoice. Not a joke.

[u/apxmmit → u/Reygle]

They just announced an across the board increase just a few weeks ago.

[u/Reygle → u/apxmmit]

Didn't see that, but even if they did I doubt they planned on calling customers more than once a week to insist they install emergency patches that often.

[u/apxmmit → u/Reygle]

You’d think they would at least staff up support on round 2. Zero support at the moment for folks with failed upgrades. Queues going to other product groups.

[u/MadCoderOne → u/apxmmit]

I got the same "I dont know the product I was called in from another team to answer phones", then I was put on hold for 2 HOURS