CVE-2026-86218: N-able N-central Static Code Injection Vulnerability

criticalknown exploitedpublic exploitCVE-2026-86218

Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.

N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.

Details

Source: CISA Known Exploited Vulnerabilities (US · database · site)
Severity: critical
Published: 2026-09-08
Exploitation: Observed in the wild (CISA KEV)

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-86218

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation confirmedCVE-2026-86218Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 53% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-86218	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownexploitedN-able security advisory (AV26-885) – Update 2cccs
criticalexploited[UPDATE] [kritisch] N-able N-Central: Mehrere Schwachstellen ermöglichen Offenlegung von Informationencert-bund
highexploitedCISA Adds Four Known Exploited Vulnerabilities to Catalogcisa
unknownexploitedNCSC-2026-0342 [1.00] [H/H] Kwetsbaarheid verholpen in N-central van N-ablencsc-nl
criticalexploitedCVE-2026-86218: N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: befo…nvd

CVE-2026-86218: N-able N-central Static Code Injection Vulnerability

Details

Exploitation outlook

Referenced CVEs

Same CVEs, other sources

More from CISA Known Exploited Vulnerabilities