CVE-2026-86206

Published on September 5, 2026

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

Weakness type (CWE)CWE-791

Vulnerabilities

N-able Fixes Critical Pre-Auth RCE in N-central as Exploitation Reports Conflict

N-able fixes CVE-2026-86218, a CVSS 10.0 pre-auth RCE in N-central. Update to 2026.3.1.14 immediately amid conflicting exploitation reports.

Sep 7, 202617:526 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

N-able Fixes Critical Pre-Auth RCE in N-central as Exploitation Reports Conflict