Vulnerability intelligence
CVE-2026-86206
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
CVSS Score
6.9
Medium
EPSS — Exploit Probability
1.1%
Riskier than 66% of all CVEs · checked 2026-10-21
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
5 articles across 5 outlets · first covered Sep 7, 2026 · latest Sep 9, 2026
Coverage timeline
-
CISA Warns Attackers Are Exploiting N-able N-central Flawthehackernews.com · Sep 9, 2026
-
N-able N-central Flaws Let Attackers Create Admin Accounts Remotelywww.rapid7.com · Sep 8, 2026
-
N-able Patches Exploited N-central Zero-Day Allowing Server Takeoverwww.securityweek.com · Sep 8, 2026
-
N-able Patches CVSS 10 N-central Flaw Enabling Pre-Auth RCEwww.infosecurity-magazine.com · Sep 7, 2026
-
N-able Patches N-central RCE Exploited Against MSPssecurityonline.info · Sep 7, 2026