N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)
Brief
N-able released an emergency hotfix for CVE-2026-86218, a remote code execution (RCE) flaw affecting N-central, its remote monitoring and management (RMM) solution popular with managed service providers (MSPs). In its release notes, N-able described CVE-2026-86218 as a “critical-CVSS-rated vulnerability that could allow for pre-authenticated remote code execution on the N-central server.”
N-able addressed the flaw on September 5 by releasing Hotfix 4 for N-central 2026. 3, bringing the build to version 2026.
- 1.
- “Customers running on-premises N-central … More →
The post N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218) appeared first on Help Net Security .