🔴 Critical: N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
-
CISA has added a maximum-severity vulnerability affecting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, tracked as CVE-2026-86218, carries a CVSS score of 10.0, and federal agencies have been given until September 11, 2026 to apply the available fixes.
The vulnerability is a pre-authentication remote code execution (RCE) issue in N-able's remote monitoring and management platform. It has reportedly been exploited in the wild, which is why it was added to the KEV catalog.
Key points:
- Product: N-able N-central
- Vulnerability: Pre-auth RCE
- CVE ID: CVE-2026-86218
- CVSS Score: 10.0 (maximum severity)
- Exploitation status: Exploited in the wild
- CISA KEV deadline for FCEB agencies: September 11, 2026
Administrators running N-central should prioritize patching. The KEV listing also means federal agencies must remediate the flaw by the mandated deadline.
Source: The Hacker News
Does your organization run N-able N-central, and if so, have you already applied the patch?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login