N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws
N-able released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) fixing CVE-2026-86218, a critical pre-authentication RCE.
N-able shipped N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to patch CVE-2026-86218, a critical remote code execution vulnerability exploitable without authentication. The hotfix follows a series of authentication flaws discovered in the N-central platform. Organizations running N-central should apply the update promptly; the notice does not report active exploitation.
- CVE-2026-86218 is a critical pre-auth RCE in N-central
- Fixed in build 2026.3.1.14 (Hotfix 4)
- Patch follows a series of prior authentication flaws
- No active exploitation reported in the disclosure
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-86218 | Pre-Auth Static Code Injection RCE in N-able N-central (Exploited in the Wild) | 10.0 | 15% | KEVPoC ×3 | KEV |
From the original article
N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws N-able has released N-central 2026. 3 Hotfix 4 (build 2026. 3.
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.