CVE-2026-86218

KEV
Published: Set 06, 2026 Last Modified: Set 09, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 10,0
Source: a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0074
Percentile
0,5th
Updated

EPSS Score Trend (Last 5 Days)

96

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Access Control Integrity Availability Other Non-Repudiation
Potential Impacts:
Read Files Or Directories Read Application Data Bypass Protection Mechanism Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Hide Activities
Applicable Platforms
Languages: PHP, Perl, Interpreted
View CWE Details
Application

N-Central by N-Able

Product Information
Vendor N-Able
Product N-Central
Version 2026.3
cpe:2.3:a:n-able:n-central:2026.3:hotfix2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

N-Central by N-Able

Product Information
Vendor N-Able
Product N-Central
Version Range Affected
To 2026.3 (exclusive)
cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

N-Central by N-Able

Product Information
Vendor N-Able
Product N-Central
Version 2026.3
cpe:2.3:a:n-able:n-central:2026.3:hotfix1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

N-Central by N-Able

Product Information
Vendor N-Able
Product N-Central
Version 2026.3
cpe:2.3:a:n-able:n-central:2026.3:hotfix3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

N-Central by N-Able

Product Information
Vendor N-Able
Product N-Central
Version 2026.3
cpe:2.3:a:n-able:n-central:2026.3:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026…
https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KA…
https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preau…