Vendors and CVEs › CVEs › CVE-2026-90436
CVE-2026-90436: what it is, who is affected and what to do
BleepingComputer reports attackers are exploiting a newly disclosed N-central zero-day flaw, named "4EverAble2Shell", to compromise servers and deploy cryptocurrency miners. Researchers count at least 21 affected systems, 19 of them on the latest security update.
- Known exploited. Not on CISA’s list when reported.
- CVSS. 9.8, as the source states.
- EPSS. 1% chance of exploitation in the next 30 days, when reported.
- Records. CVE-2026-90436 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Attackers exploit unpatched N-able N-central flaw to install crypto miners
BleepingComputer reports attackers are exploiting a newly disclosed N-central zero-day flaw, named "4EverAble2Shell", to compromise servers and deploy cryptocurrency miners.