CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
N-able N-central Pre-Authentication Remote Code Execution Vulnerability Advisory (CVE-2026-86218)
[Affected Scope] N-able N-central versions prior to 2026.3.1.14
[Impact] Unauthenticated remote attackers can execute arbitrary code with high privileges and fully compromise the system by sending specially crafted requests
[Mitigation] Immediately upgrade N-central to version 2026.3.1.14 or later, and restrict external access until patched
N-able N-central Authentication Bypass and Account Takeover Vulnerability (CVE-2026-18577) Security Advisory
[Affected Scope] N-able N-central versions up to and including 2026.3.1
[Impact] Attackers can bypass authentication and achieve full account takeover by exploiting an incomplete patch for CVE-2026-18556
[Mitigation] Immediately upgrade to N-central 2026.3 Hotfix 1 or later, and restrict external access to the management interface until patched
N-able N-central Authentication Bypass Vulnerability (CVE-2026-18556) Security Advisory
[Affected Scope] All on-premises and cloud instances of N-able N-central running version 2026.1 and prior
[Impact] Unauthenticated attackers can bypass authentication mechanisms to gain administrative privileges, potentially leading to full compromise of managed client environments
[Mitigation] Apply the official security patches immediately and restrict external internet access to the N-central management console