Remote Code Execution Vulnerability in N-central by N-able
CVE-2026-86218

10CRITICAL

Key Information:

Vendor

N-able

Status
N-central
Vendor
CVE Published:
6 September 2026

What is CVE-2026-86218?

N-central by N-able is susceptible to a critical pre-authentication remote code execution vulnerability, which allows unauthorized parties to execute arbitrary code on vulnerable systems. This issue impacts all versions of N-central prior to 2026.3.1.14, making it essential for users to upgrade to mitigate potential exploitation risks.

Affected Version(s)

N-central 0 < 2026.3.1.14

References

https://me.n-able.com/s/security-advisory/aArVy0000002Ld3...
vendor-advisory

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.