<![CDATA[🔴 Critical: N-able N-central Pre-Auth RCE Flaw Exploited in the Wild]]>CISA has added a maximum-severity vulnerability affecting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, tracked as CVE-2026-86218, carries a CVSS score of 10.0, and federal agencies have been given until September 11, 2026 to apply the available fixes.

The vulnerability is a pre-authentication remote code execution (RCE) issue in N-able's remote monitoring and management platform. It has reportedly been exploited in the wild, which is why it was added to the KEV catalog.

Key points:

  • Product: N-able N-central
  • Vulnerability: Pre-auth RCE
  • CVE ID: CVE-2026-86218
  • CVSS Score: 10.0 (maximum severity)
  • Exploitation status: Exploited in the wild
  • CISA KEV deadline for FCEB agencies: September 11, 2026

Administrators running N-central should prioritize patching. The KEV listing also means federal agencies must remediate the flaw by the mandated deadline.

Source: The Hacker News

Does your organization run N-able N-central, and if so, have you already applied the patch?

]]>https://xploitlk.com/topic/330/critical-n-able-n-central-pre-auth-rce-flaw-exploited-in-the-wildRSS for NodeTue, 27 Oct 2026 11:47:27 GMTMon, 14 Sep 2026 06:30:17 GMT60