OVER 800 N-ABLE SERVERS LEFT UNPATCHED AGAINST CRITICAL FLAWS

Summary from the TLDR InfoSec newsletter

N-central is a popular platform, developed by N-able, that is used by managed services providers (MSPs) and IT departments to monitor and manage networks and devices from a centralized web-based console. N-able has announced two vulnerabilities that allow authenticated attackers to inject commands due to improper sanitization of user input and execute commands on unpatched devices by exploiting an insecure deserialization weakness. The vulnerabilities are reportedly under active exploitation.