CVE-2026-86207

Published on September 5, 2026

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

Weakness type (CWE)CWE-305

N-able Fixes Critical Pre-Auth RCE in N-central as Exploitation Reports Conflict

N-able fixes CVE-2026-86218, a CVSS 10.0 pre-auth RCE in N-central. Update to 2026.3.1.14 immediately amid conflicting exploitation reports.

This product uses the NVD API but is not endorsed or certified by the NVD.