N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

A high-severity security flaw in N-able N-central is being exploited in the wild. The US Cybersecurity and Infrastructure Security Agency has added this vulnerability to its list of known exploited vulnerabilities. Federal agencies are required to apply fixes by September 11, 2026. The vulnerability has a CVSS score of 10.0, indicating a maximum severity level. It is identified as CVE-2026-86218 and is described as a pre-authentication remote code execution flaw.