WID-SEC-W-2026-3205

DeutschShown in its original language — a full translation is planned for a future version.

N-able N-Central: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

view advisory published 2026-09-06

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in N-able N-Central ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Code auszuführen.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-86218US	critical9.8OT critical	15.4% (97th)	KEV	2026-09-06
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
CVE-2026-86206US	—	1.12% (66th)	—	2026-09-05
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
CVE-2026-86207US	—	1.25% (69th)	—	2026-09-05
An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

references

External citations — patches, advisories, analysis.

N-able Release Notes vom 2026-09-06external
N-able Release Notes vom 2026-09-06external
WID-SEC-W-2026-3205 - CSAF Versionself
WID-SEC-2026-3205 - Portal Versionself
Bleeping Computer vom 2026-09-06external
CISA Known Exploited Vulnerabilities Catalog vom 2026-09-08external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan