Build Number: 2026.4.1.26
Last Updated: November 10th, 2026
N-central 2026.4 Hotfix 2 is a critical security update. It includes a number of security patches and technology updates that improve the overall security of N-central. This hotfix strengthens the following areas:
Continue readingA new addition to Endpoint Remediation, joining our Mac and Linux engines. Available today for on-demand patching.
We’re excited to announce a brand-new Windows OS patching engine, now available in both N-sight and N-central.
It’s part of Endpoint Remediation and joins the Mac and Linux engines you may already use, as well as 3rd Party Patch. It’s built on the same modern architecture, so Windows patching now follows the same consistent approach as the rest of your estate.
Continue readingOn Wednesday, 11th of November, we will be releasing an update to Web Protection Agent and Web Service on US Region. We are also going to release Web Service version 6.0.1 to the other regions: APAC, EU-Central, and EU-West on the same day. No downtime should occur in these last regions.
This update introduces a new .NET version for both Web Service and Agent; thus, it will only be supported by the devices that support the .NET 10 version. This update will only support Windows Modern Operating Systems. Designed for Windows 10+/Windows Server 2016+ and higher, this version will allow updates/upgrades to newer versions.
Continue readingPatch Management Engine (PME) 2.14.3 is now generally available. This release adds support for upgrading to the Windows 11 26H2 Feature Update by Enablement Package.
Support for the 26H2 Feature Update by Enablement Package
PME can now upgrade eligible devices to the 26H2 Feature Update using the Enablement Package, which is a quick, lightweight way to move devices to the new version.
| Application | Version Number |
| PME | 2.14.3.5823 |
| MSPPlatform | 2.14.2.5236 |
| PME.Diagnostics | 2.14.0.5028 |
| PME.ThirdPartyPatch | 2.14.2.2.14.0.50285069 |
| File | SHA-256 Hash |
|---|---|
| PMESetup.exe | A24A6CAB883D02EBABCC5DED69916A1B22771D29C093C4068721570E4E40E603 |
| FileCacheServiceAgentSetup.exe | 000947072D839862584444D5134B9AC7C4BEAE672A4B65112891F7D60EBF6121 |
| RequestHandlerAgentSetup.exe | 15C2505944FA2AD433EA6E9BF472DAAE0365B4CEB0404DD64015A0477F8F9EDC |
| PME unins000.exe | EB87F443506F7BF80FBFE3DE00D1A49761AEBD60007C83BFFAAE253D825231BF |
| RequestHandlerAgent unins000.exe | CCC5373FE5C64901D158BB431D6A26B042CCFDD2A112AAF004831925EA43ED56 |
| FileCacheServiceAgent unins000.exe | 235A19541FE8DF8A5E6A662EABA60235628A8B67874E7F9115503C7A3FFBF298 |
| %TEMP%\is-*\pmesetup.tmp | 8FAC08CF9A3A48C24B289AC427DA96FD48ADBFC82BA7A1D6308F89717A92E463 |
| %TEMP%\is-*\FileCacheServiceAgentSetup.tmp | 683C28139476263C619F1E2B72487153C59A0EC2F468C58D39DFF3B03C397356 |
| %TEMP%\is-*\RequestHandlerAgentSetup.tmp | D038662275C61263790A7805CB67555AA002332BB15E500C020439A84E08C5FF |
| ThirdPartyPatch_2.14.2.5069.exe | 4B2164586872C8E468EF12851ABB6149F155E8989511B5A27AF383D6951B6805 |
We’re pleased to announce an upcoming release for N-able Risk Intelligence, scheduled for delivery starting on Tuesday, November 10th, 2026.
This release is focused on upgrades to our back-end systems addressing several security related improvements, and infrastructure enhancements.
Continue readingThe expanded Passportal API is now available across all production environments.
This provides additional routes for:
The password routes support operations such as creating and updating passwords. Credential types provide required information for these operations, while folder routes give integrations access to the related folder resources.
Service Account Tokens are the recommended authentication option for new integrations.
Compared with the legacy client_token, Service Account Tokens provide more granular control over permissions and access levels. This lets customers use a token designed for an integration rather than relying on the legacy authentication model.
Service Account Tokens also provide:
Full API scope: Service Account Tokens accept the everything scope. User Token accept both everything and docs_api scopes.
Dedicated integration credentials: Use an account token intended for API access rather than tying the integration to a user token.
Refresh support: Use the dedicated route to refresh a Service Account Token.
Current documentation: Build against the authentication method covered in the updated Passportal API documentation.
Existing integrations using the legacy client_token can continue to work. The route remains active and hasn’t been marked as removed or deprecated. No immediate migration is required.
The main benefit of the legacy token is compatibility with existing integrations. For new development, we recommend using a Service Account Token for its dedicated integration credentials and more granular permissions and access controls.
Customers can review the available routes, authentication options, request fields, and response examples in the Passportal developer documentation.
Build Number: 2026.4.0.32
Last Updated: November 2nd, 2026
Note:If you have already successfully upgraded to 2026.4.0.31, there is no need to upgrade to 2026.4.0.32. Version 2026.4.0.32 includes changes to accommodate servers that had the PMCM-12156 performance code drop applied. If you have not yet upgraded, please proceed with the upgrade to 2026.4.0.32.
N-central runs on AlmaLinux 9, and this hotfix updates the underlying operating system to the latest available updates, including security fixes for CVE-2026-98432, CVE-2026-111497 and CVE-2026-114406. CVE-2026-98432 is a critical-rated vulnerability (CVSS 9.8) in the Linux kernel that a remote attacker could exploit with specially timed network requests to crash the system or potentially corrupt memory. CVE-2026-114406 removes trust for root CA certificates that signed weak intermediate certificates issued by eMudhra, which could otherwise allow a man-in-the-middle attacker to issue certificates that clients using the system CA store would trust.
N-central does not make use of the Brotli decoder affected by CVE-2026-111497 and is therefore not vulnerable. As part of following best practices, the update has been applied to the server in this release.
Customers running on-premises N-central deployments should upgrade to N-central 2026.4 HF1 as soon as possible to protect their environment. Hosted N-central servers are upgraded by N-able.
This hotfix also includes a performance fix for the submission of patch vulnerability data. See Bug Fixes.
N-central CMMC Download (For CMMC Subscribed Accounts)
This release supersedes N-central 2026.4 (build 2026.4.0.27). To learn what’s included in the 2026.4 release, see N-central 2026.4 Release Notes.
Supported Upgrade Paths
The following upgrade paths are supported for 2026.4 HF1: Build Number: 2026.4.0.32
| Upgrading From | Supported |
| 2025.4 | Yes |
| 2026.1 | Yes |
| 2026.2 | Yes |
| 2026.3 | Yes |
| 2026.3.1 (Hotfix 1 to Hotfix 4) | Yes |
| 2026.4 (build 2026.4.0.27) | Yes |
| Earlier | No – upgrade to a supported version first |
For on-premises installations, refer to the upgrade guide: https://documentation.n-able.com/N-central/userguide/Content/ReleaseDocs/Install_Config/InstallConfig_Upgrade.htm
| Issue | Details |
| PMCM-12156 | Summary: Improved performance when devices submit patch vulnerability data. Issue: When many devices submitted patch vulnerability data, the server ran a separate database query for each submitted vulnerability while holding a server-wide lock, which could stall the user interface. Fix: Updated the submission process to look up the data in a single query for each submission. |
For More Information:
Support: https://me.n-able.com/s/
Uptime Page: https://uptime.n-able.com/
The new version of the Take Control Windows Agent will be released for the Standalone product (Take Control and Take Control Plus), as well as for the N-central, N-sight, and Cove DRaaS integrations.
This release delivers targeted updates to improve remote connection reliability and resolves an endpoint stability issue that could occur after extended operation in certain environments. It also includes ongoing platform security maintenance, with updates to several external modules.
Continue readingOver the coming week, we will be releasing an update to MAV agents, starting Tuesday, November 3rd. The changes will be available across all regions by end of week (November 6th).
🛠️ Key Changes:
Please be advised we will be pushing an update to activated N-central servers (N-central 2023.5+) as of Tuesday November 3rd for AV Defender (8.26.10.670). This will be available for updates at this time.
We would also like to advise you that Tuesday November 10th Av Defender 8.26.10.670 will be available for Fresh Installs and Upgrades.
Continue reading
You must be logged in to post a comment.