N-able released a fourth N-central hotfix for a CVSS 10 flaw that could let an unauthenticated attacker run code. NHS England reports possible zero-day exploitation, while N-able says production exploitation is not confirmed.