CVE-2026-86207 2

Vulnerability (CVE)

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

CISA added CVE-2026-86218, a CVSS 10.0 static code injection flaw in N-able N-central that allows pre-authentication remote code execution, to its KEV catalog on Tuesday, requiring FCEB agencies to apply fixes by September 11, 2026; the flaw was patched in...

Vulnerabilities & Patching

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Cyber Risks The Hacker News

N-able released hotfixes for two severe N-central flaws (CVE-2026-86206 and CVE-2026-86207) that could let an unauthorized party bypass authentication and gain full platform access, plus a maximum-severity flaw (CVE-2026-86218, CVSS 10.0) allowing...

Vulnerabilities & Patching