Paper/Archive/CVE-2026-86218

CVE-2026-86218

N-able N-central — pre-authentication remote code execution

KEV · due 11 Sep EPSS 15%public exploit SSVC act CVSS 10.0

critical.is priorityof 100

99

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 96.8.968 × 2019.4 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

Affected

ProductAffectedFixed inSource

N-central< 2026.3.1.142026.3.1.14CNA

Scores by source

N-able (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisoryme.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86218 kevcisa.gov/known-exploited-vulnerabilities-catalog