{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/n-able-n-central/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:gpustack:gpustack:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-102895"}],"_cs_exploited":true,"_cs_has_poc":true,"_cs_poc_references":[],"_cs_products":["GPUStack","Microsoft 365","N-able N-central","ScreenConnect"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"threat","_cs_vendors":["ConnectWise","GPUStack","Microsoft","N-able"],"content_html":"\u003cp\u003eRecent reports cover several security and service disruptions:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eGPUStack (CVE-2026-102895):\u003c/strong\u003e Scans are targeting a vulnerability where an attacker can spoof the X-GPUStack-Real-IP header with the loopback address to bypass authentication.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eConnectWise ScreenConnect:\u003c/strong\u003e The company is investigating the compromise of approximately 400 customer and partner sites and has disabled certain third-party plugins.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eN-able N-central:\u003c/strong\u003e Public exploit code has been released for at least three N-central vulnerabilities that were previously disclosed without vendor notification.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eMicrosoft 365:\u003c/strong\u003e A significant availability event impacted services including Exchange, Outlook, and related single sign-on functions like Entra.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eActive scanning is occurring for the GPUStack authentication bypass. ConnectWise is investigating compromises in hundreds of environments. Unverified public exploit code exists for N-able N-central. Microsoft 365 users experienced service disruptions.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eOrganizations using affected platforms should review the respective vendor advisories and monitor official status pages for updates and remediation guidance.\u003c/p\u003e\n","date_modified":"2026-11-13T04:36:28Z","date_published":"2026-11-13T04:36:28Z","id":"https://feed.craftedsignal.io/briefs/2026-11-gpustack-n-able-screenconnect-cve-2026-102895/","summary":"This brief summarizes reports regarding GPUStack authentication bypass scans, a ConnectWise ScreenConnect security advisory, public exploit code for N-able N-central, and a Microsoft 365 availability incident.","title":"GPUStack, ConnectWise, N-able, and M365 Security and Availability Updates","url":"https://feed.craftedsignal.io/briefs/2026-11-gpustack-n-able-screenconnect-cve-2026-102895/"}],"language":"en","title":"CraftedSignal Threat Feed - N-Able N-Central","version":"https://jsonfeed.org/version/1.1"}