{"id":"CVE-2026-86218","title":"N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","summary":"N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-96"],"vendor":"n-able","product":"n-central","affected":["n-central < 2026.3","n-central = 2026.3"],"patched":["n-central 2026.3"],"published":"2026-09-06","updated":"2026-09-09","sourceUpdated":"2026-09-09T05:18:19.490","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86218","references":[{"url":"https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution","label":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86218","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","in-the-wild","exploit-available","kev"],"exploited":true,"exploitAvailable":true,"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-08T18:44:13.538607Z"},"scores":{"nvd":9.8,"cna":10},"epss":0.07494,"epssPercentile":0.94295,"kev":true,"kevDateAdded":"2026-09-08","kevDueDate":"2026-09-11","kevRansomware":false,"exploits":{"github":2,"githubRepos":["https://github.com/HORKimhab/CVE-2026-86218","https://github.com/Udyz/CVE-2026-86218"],"nuclei":["CVE-2026-86218"],"checkedAt":"2026-09-21T15:31:02.260Z"},"ingestedAt":"2026-09-06T15:57:05.200Z","slug":"CVE-2026-86218","body":"## Overview\n\nN-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.\n\n## Affected\n\n- `n-central < 2026.3`\n- `n-central = 2026.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `n-central 2026.3`","depth":"hadal","depthScore":80,"depthScoreParts":{"impact":53.9,"likelihood":1.5,"exploitation":25,"ransomware":0},"changes":[{"seq":207765,"id":"CVE-2026-86218","ts":1789838499569,"field":"epss","old":"0.00744","new":"0.07494"},{"seq":202093,"id":"CVE-2026-86218","ts":1789400062426,"field":"kev","old":"false","new":"true"},{"seq":200820,"id":"CVE-2026-86218","ts":1789397616426,"field":"kev","old":"true","new":"false"},{"seq":199513,"id":"CVE-2026-86218","ts":1789395528964,"field":"kev","old":"false","new":"true"},{"seq":198758,"id":"CVE-2026-86218","ts":1789392244137,"field":"kev","old":"true","new":"false"},{"seq":197091,"id":"CVE-2026-86218","ts":1789384292457,"field":"kev","old":"false","new":"true"},{"seq":194220,"id":"CVE-2026-86218","ts":1789378783093,"field":"kev","old":"true","new":"false"},{"seq":193007,"id":"CVE-2026-86218","ts":1789376515137,"field":"kev","old":"false","new":"true"},{"seq":191794,"id":"CVE-2026-86218","ts":1789373631122,"field":"kev","old":"true","new":"false"},{"seq":190579,"id":"CVE-2026-86218","ts":1789369475729,"field":"kev","old":"false","new":"true"},{"seq":189366,"id":"CVE-2026-86218","ts":1789368414574,"field":"kev","old":"true","new":"false"},{"seq":188149,"id":"CVE-2026-86218","ts":1789365230824,"field":"kev","old":"false","new":"true"},{"seq":186936,"id":"CVE-2026-86218","ts":1789363471288,"field":"kev","old":"true","new":"false"},{"seq":185722,"id":"CVE-2026-86218","ts":1789361229184,"field":"kev","old":"false","new":"true"},{"seq":184509,"id":"CVE-2026-86218","ts":1789358363758,"field":"kev","old":"true","new":"false"},{"seq":182760,"id":"CVE-2026-86218","ts":1789354317209,"field":"kev","old":"false","new":"true"},{"seq":181553,"id":"CVE-2026-86218","ts":1789353317705,"field":"kev","old":"true","new":"false"},{"seq":180346,"id":"CVE-2026-86218","ts":1789350284766,"field":"kev","old":"false","new":"true"},{"seq":179139,"id":"CVE-2026-86218","ts":1789348292884,"field":"kev","old":"true","new":"false"},{"seq":177932,"id":"CVE-2026-86218","ts":1789346370072,"field":"kev","old":"false","new":"true"},{"seq":176725,"id":"CVE-2026-86218","ts":1789343184536,"field":"kev","old":"true","new":"false"},{"seq":174842,"id":"CVE-2026-86218","ts":1789334875750,"field":"kev","old":"false","new":"true"},{"seq":173637,"id":"CVE-2026-86218","ts":1789333688493,"field":"kev","old":"true","new":"false"},{"seq":172451,"id":"CVE-2026-86218","ts":1789331093069,"field":"kev","old":"false","new":"true"},{"seq":171265,"id":"CVE-2026-86218","ts":1789328780899,"field":"kev","old":"true","new":"false"},{"seq":170060,"id":"CVE-2026-86218","ts":1789327197212,"field":"kev","old":"false","new":"true"},{"seq":168855,"id":"CVE-2026-86218","ts":1789323840097,"field":"kev","old":"true","new":"false"},{"seq":167650,"id":"CVE-2026-86218","ts":1789319702631,"field":"kev","old":"false","new":"true"},{"seq":166445,"id":"CVE-2026-86218","ts":1789318776148,"field":"kev","old":"true","new":"false"},{"seq":165240,"id":"CVE-2026-86218","ts":1789315790383,"field":"kev","old":"false","new":"true"},{"seq":164035,"id":"CVE-2026-86218","ts":1789313634290,"field":"kev","old":"true","new":"false"},{"seq":162830,"id":"CVE-2026-86218","ts":1789311903497,"field":"kev","old":"false","new":"true"},{"seq":161625,"id":"CVE-2026-86218","ts":1789308733219,"field":"kev","old":"true","new":"false"},{"seq":159738,"id":"CVE-2026-86218","ts":1789300470614,"field":"kev","old":"false","new":"true"},{"seq":156727,"id":"CVE-2026-86218","ts":1789294755678,"field":"kev","old":"true","new":"false"},{"seq":155522,"id":"CVE-2026-86218","ts":1789292967991,"field":"kev","old":"false","new":"true"},{"seq":154317,"id":"CVE-2026-86218","ts":1789289797607,"field":"kev","old":"true","new":"false"},{"seq":151568,"id":"CVE-2026-86218","ts":1789277629915,"field":"kev","old":"false","new":"true"},{"seq":150529,"id":"CVE-2026-86218","ts":1789276245655,"field":"kev","old":"true","new":"false"},{"seq":149496,"id":"CVE-2026-86218","ts":1789273824768,"field":"kev","old":"false","new":"true"},{"seq":148463,"id":"CVE-2026-86218","ts":1789271348763,"field":"kev","old":"true","new":"false"},{"seq":146494,"id":"CVE-2026-86218","ts":1789269398087,"field":"kev","old":"false","new":"true"},{"seq":145299,"id":"CVE-2026-86218","ts":1789266339680,"field":"kev","old":"true","new":"false"},{"seq":144203,"id":"CVE-2026-86218","ts":1789262616798,"field":"kev","old":"false","new":"true"},{"seq":143107,"id":"CVE-2026-86218","ts":1789261533451,"field":"kev","old":"true","new":"false"},{"seq":141938,"id":"CVE-2026-86218","ts":1789258831830,"field":"kev","old":"false","new":"true"},{"seq":140779,"id":"CVE-2026-86218","ts":1789256727166,"field":"kev","old":"true","new":"false"},{"seq":139581,"id":"CVE-2026-86218","ts":1789254832118,"field":"kev","old":"false","new":"true"},{"seq":138383,"id":"CVE-2026-86218","ts":1789251934239,"field":"kev","old":"true","new":"false"},{"seq":137185,"id":"CVE-2026-86218","ts":1789247832842,"field":"kev","old":"false","new":"true"}]}