Medium severityNVD Advisory· Published Sep 5, 2026· Updated Sep 8, 2026
CVE-2026-86206
CVE-2026-86206
Description
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
8- CISA Warns of N-able N-central RCE Vulnerability Exploited in the WildCyber Security News · Sep 9, 2026
- N-able N-central Pre-Auth RCE Flaw Exploited in the WildThe Hacker News · Sep 9, 2026
- CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)Rapid7 Blog · Sep 8, 2026
- N-able Patches Critical Zero-Day in N-centralSecurityWeek · Sep 8, 2026
- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreThe Hacker News · Sep 7, 2026
- N-able Releases Hotfix for Critical Remote Code Execution VulnerabilityInfosecurity Magazine · Sep 7, 2026
- N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)Help Net Security · Sep 7, 2026
- N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE FlawThe Hacker News · Sep 7, 2026