Description
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| N-able | N-central | < 2026.3.1.13 | 2026.3.1.13 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing http/cves/2026/CVE-2026-86206.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2026-3205 N-able N-Central: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 8, 2026