N-able N-central

7 known vulnerabilities in N-able N-central, 3 critical, 5 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-86218 CVSS 10.0 critical · actively exploited N-able N-central Static Code Injection Vulnerability
  • CVE-2026-18577 CVSS 8.2 high · actively exploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2026-18556 CVSS 8.2 high · actively exploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2025-8876 CVSS 9.4 critical · actively exploited N-able N-Central Command Injection Vulnerability
  • CVE-2025-8875 CVSS 9.4 critical · actively exploited N-able N-Central Insecure Deserialization Vulnerability

Latest vulnerabilities

  • CVE-2026-86218 CVSS 10.0 critical · actively exploited N-able N-central Static Code Injection Vulnerability
  • CVE-2026-86206 CVSS 6.9 medium A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in…
  • CVE-2026-86207 CVSS 7.7 high An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs
  • CVE-2026-18577 CVSS 8.2 high · actively exploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2026-18556 CVSS 8.2 high · actively exploited N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2025-8876 CVSS 9.4 critical · actively exploited N-able N-Central Command Injection Vulnerability
  • CVE-2025-8875 CVSS 9.4 critical · actively exploited N-able N-Central Insecure Deserialization Vulnerability