Search/N-able Releases Hotfix for Critical Remote Code Execution Vulnerability
● News

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

Managed IT software provider N-able has released a new hotfix that includes a patch for a critical remote code execution (RCE) vulnerability. CVE-2026-86218 is a critical pre-authentication RCE flaw in N-central, N-able’s remote monitoring and management platform. It was disclosed by the software provider on September 6 and was allocated a maximum-severity rating (CVSS) of 10. The vulnerability affects N-central versions before 2026.3.1.14 and can allow an unauthenticated attacker to execute code on the N-central server. N-able has not publicly disclosed the affected component or exploitation method. It said it has found no evidence that CVE-2026-86218 has been exploited in production environments. Meanwhile, the software provider released a patch for the vulnerability in its N-central…

Read original article
Source
infosecurity-magazine.com
Published
Sep 7, 2026
Mentions
3
language: en
Connections
5 relationships