What’s Vulnerable › Vulnerabilities

CVE-2026-86207: Authentication bypass leads to unauthorised access to N-central

• Severity: high (CVSS 7.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-09-05 · updated 2026-09-08
• Weakness: CWE-305

Description

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

Affected products

• N-able N-central: before 2026.3.1.13 — fixed in 2026.3.1.13

How to fix

Upgrade to a fixed version: N-able N-central 2026.3.1.13. Check the vendor advisory for mitigations.

References

• https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF3_Release_Notes.htm
• https://me.n-able.com/s/security-advisory/aArVy0000002LUzKAM/cve202686207-authentication-bypass-leads-to-unauthorised-access-to-ncentral

Get alerted when CVE-2026-86207 or the next vulnerability affects your stack