Vulnerability Details CVE-2026-86218
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 34.3%
CVSS Severity
CVSS v3 Score 9.8
Proposed Action
N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.
Ransomware Campaign
Unknown
References
Products affected by CVE-2026-86218
-
cpe:2.3:a:n-able:n-central:-
-
cpe:2.3:a:n-able:n-central:2023.4
-
cpe:2.3:a:n-able:n-central:2023.6
-
cpe:2.3:a:n-able:n-central:2023.7
-
cpe:2.3:a:n-able:n-central:2024.1
-
cpe:2.3:a:n-able:n-central:2024.2
-
cpe:2.3:a:n-able:n-central:2024.3
-
cpe:2.3:a:n-able:n-central:2024.4
-
cpe:2.3:a:n-able:n-central:2024.6
-
cpe:2.3:a:n-able:n-central:2025.1
-
cpe:2.3:a:n-able:n-central:2025.2
-
cpe:2.3:a:n-able:n-central:2025.2.1
-
cpe:2.3:a:n-able:n-central:2025.3
-
cpe:2.3:a:n-able:n-central:2025.3.1
-
cpe:2.3:a:n-able:n-central:2025.4
-
cpe:2.3:a:n-able:n-central:2026.1
-
cpe:2.3:a:n-able:n-central:2026.2
-
cpe:2.3:a:n-able:n-central:2026.3