N-able fixes a critical pre-authentication RCE in N-central
N-able disclosed CVE-2026-86218, a critical vulnerability that can allow unauthenticated remote code execution on an N-central server. Versions before build 2026.3.1.14 are affected; N-able says hosted N-central instances are already patched and that it has no confirmed production exploitation.
Source: N-able Security Advisory ↗ · Published September 6, 2026
