Skip to content
OpenAdvisories
Critical 1 exploited CVE WID-SEC-2026-3205 3 CVEs

N-able N-Central: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Sep 6, 2026 · Updated Sep 8, 2026 · Revision 2 · de-DE

Vendor: N-able Product: N-central Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in N-able N-Central ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Code auszuführen.

Product

N-able N-central ist eine Remote Monitoring and Management (RMM)-Plattform für Managed Service Provider (MSPs) und IT-Abteilungen

Vulnerabilities 3

  • Critical 10.0
    CVE-2026-86218 Exploited Public exploit Scanner template EPSS 15%

    pre-authentication remote code execution

    N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

    N-able N-central
    KEV Sep 8, 2026
  • High 7.7
    CVE-2026-86207 Scanner template

    Authentication bypass leads to unauthorised access to N-central

    An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

    N-able N-central
  • Medium 6.9
    CVE-2026-86206 Scanner template

    Access control filter bypass allows unauthorised access to APIs

    A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

    N-able N-central

Revision history

  1. #2

    Aktive Ausnutzung gemeldet

  2. #1

    Initiale Fassung

References