N-able RMM Security Notice: Magna5 Servers Temporarily Offline

N-able functionality remains operational. We will continue to monitor the situation, review any additional notifications, and respond to updates from N-able as needed.

Magna5 has confirmed that our N-able RMM environment is not affected by this vulnerability.

As a result, Magna5 is removing the temporary IP address allow-list restrictions that were implemented as a precaution.

At this time, Magna5 has no indication that Magna5 systems or customer systems have been compromised or affected.

We will continue to monitor N-able’s guidance and provide further updates if needed.

Magna5 is aware of potential new zero-day vulnerabilities publicly posted on GitHub by the same independent researcher, without prior notification to N-able. Because the post includes detailed exploitation instructions, Magna5 is treating the exploit information as publicly available.

As a precaution, Magna5 has implemented IP address allow-list restrictions for access to RMM servers.

At this time, Magna5 has no indication that Magna5 systems or customer systems have been compromised or affected.

If you are unable to access RMM and need your company’s external IP address added to the allow list, please submit a ticket to support@magna5.com.

For additional updates, please refer to N-able’s official status bulletin:

https://uptime.n-able.com/

The N-able RMM servers have been restored and are back online.

As part of its remediation efforts, N-able disabled Remote Desktop functionality. Take Control remains available for remote access. We expect N-able to release additional patches soon to restore Remote Desktop functionality.

As mentioned previously, Magna5 is transitioning to NinjaOne RMM as its primary remote monitoring and management platform. For more information about the transition, its benefits, what to expect, and the available migration options, please review the full announcement and complete the transition form: https://www.magna5.com/rmm-transition/

Magna5 has begun bringing its N-able RMM servers back online.

As service is restored, N-able agents and probes will be upgraded across customer environments. This process will occur in stages and may take time to complete across all devices.

Remote Control Changes: Built-in Remote Desktop services will remain offline at this time. Take Control will continue to function as normal.

We will continue to monitor the environment as services come back online and will provide further updates as progress continues.

Magna5’s N-able RMM servers remain offline and isolated.

N-able has released a hotfix intended to address the zero-day vulnerabilities announced on November 9, 2026. Magna5 is beginning the process of applying the hotfix to its N-able RMM servers.

After the hotfix is applied, Magna5 will perform testing and validation before restoring service. The servers will remain offline and isolated until this process is complete.

We will continue to monitor N-able’s guidance and will provide an additional update when the RMM servers are brought back online.

Magna5’s N-able RMM servers remain offline and isolated as a precautionary measure.

As of this update, N-able has not released patches or hotfixes for the zero-day vulnerabilities announced on November 9, 2026. N-able has advised that it expects to provide additional direction at 10:00 a.m. ET on November 10, 2026. Magna5 continues to monitor the situation and will provide further updates as information becomes available.

At Magna5, we continually invest in the tools that help keep our customers secure and productive. Over the past several months, we have worked closely with NinjaOne to configure, test, and prepare the NinjaOne RMM platform to become our primary remote monitoring and management system. This transition will maintain the core services customers receive today while providing improved automation, patch management, endpoint visibility, and reporting capabilities.

Given the ongoing issues with N-able, Magna5 is accelerating our planned schedule by two weeks and will begin onboarding and transitioning customers.

For more information about the transition, its benefits, what customers should expect, and the available migration options, please review the full announcement and complete the transition form: https://www.magna5.com/rmm-transition/

Customers who would like their migration prioritized should indicate that preference using the transition form available on the webpage above.

Magna5’s N-able RMM servers remain offline and isolated.

N-able has advised that it has found no evidence of active exploitation. The vulnerability details appear to have been posted to GitHub by an independent researcher without prior notification to N-able. Because the post includes detailed instructions for exploiting the vulnerabilities, we are treating the exploit as publicly available.

N-able has not yet released patches to address the vulnerabilities. Its guidance remains that affected servers should stay isolated.

We will provide updates as additional information becomes available from N-able.

N-able has notified Magna5 of a zero-day vulnerability. N-able has isolated its hosted infrastructure as part of its response. Magna5 does not use N-able’s hosted infrastructure.

As a precaution, Magna5 will take its servers offline and keep them offline until we receive further information from N-able.

At this time, we have no indication that Magna5 systems or customer systems have been compromised or affected.

For updates, please refer to N-able’s official status bulletin: https://uptime.n-able.com/