Skip to main content

N-able N-central CVE-2026-86206

| EUVDEUVD-2026-72023 MEDIUM
Incomplete Filtering of Special Elements (CWE-791)
2026-09-05 N-able GHSA-9x6x-w4xq-rw3g
Information Disclosure N Central N Able
6.9
CVSS 4.0 · Vendor: N-able
Share

Severity by source

Vendor (N-able) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.3 MEDIUM

Network-reachable with no authentication required; impact confined to partial confidentiality disclosure with no integrity or availability effects.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (N-able).

CVSS VectorVendor: N-able

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Patch available
Sep 05, 2026 - 21:16 EUVD
Analysis Generated
Sep 05, 2026 - 20:06 vuln.today

DescriptionCVE.org

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

AnalysisAI

Unauthenticated remote access to restricted internal APIs is possible in N-able N-central due to an incomplete access control filter, classified under CWE-791. All N-central deployments prior to versions 2026.3 HF3 and 2026.4 are affected, as confirmed by the vendor advisory. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The CVSS 4.0 vector (PR:N/UI:N/AC:L/AT:N) indicates no special conditions - remote unauthenticated exploitation is possible against any N-central instance where the management interface is network-reachable. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N) establishes network-reachable, unauthenticated exploitation with low confidentiality impact and no integrity or availability effects, yielding a score of 6.9. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upgrade N-central to version 2026.3 HF3 or 2026.4, which contain the access control filter fix per the N-able security advisory (https://me.n-able.com/s/security-advisory/aArVy0000002LTNKA2/cve202686206-access-control-filter-bypass-allows-unauthorised-access-to-apis). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in N Central

View all
CVE-2026-86218 CRITICAL POC
10.0 Sep 06

Pre-authentication remote code execution in N-able N-central before 2026.3.1.14 allows unauthenticated remote attackers

CVE-2026-18577 HIGH POC
8.2 Aug 02

Authentication bypass and account takeover in N-able N-central through version 2026.3.1 stem from an incomplete remediat
CVE-2026-18556 HIGH POC
8.2 Aug 01

Authentication bypass in N-able N-central through version 2026.1 allows unauthenticated remote attackers to circumvent a
CVE-2025-11700 HIGH POC
8.4 Nov 12

N-able N-central remote monitoring and management platform versions before 2025.4 contain multiple XML External Entity i
CVE-2025-8876 CRITICAL
9.4 Aug 14

N-able N-central before 2025.3.1 contains an OS command injection through improper input validation, companion vulnerabi
CVE-2024-28200 CRITICAL POC
9.8 Jul 01

The N-central server is vulnerable to an authentication bypass of the user interface. Rated critical severity (CVSS 9.8)
CVE-2020-15909 HIGH POC
8.8 Oct 19

SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. Rated hig
CVE-2026-86207 HIGH POC
7.7 Sep 05

Authentication bypass in N-able N-central before version 2026.3 HF 3 permits low-privileged authenticated users to acces
CVE-2020-7984 HIGH POC
7.5 Jan 26

SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain ad
CVE-2024-5322 CRITICAL
9.1 Jul 01

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can l
CVE-2020-25622 HIGH
8.8 Dec 16

An issue was discovered in SolarWinds N-Central 12.3.0.670. Rated high severity (CVSS 8.8), this vulnerability is remote
CVE-2020-25618 HIGH
8.8 Dec 16

An issue was discovered in SolarWinds N-Central 12.3.0.670. Rated high severity (CVSS 8.8), this vulnerability is remote

Same weakness CWE-791 – Incomplete Filtering of Special Elements

View all
CVE-2022-2132 HIGH POC
8.6
CVE-2025-0324 CRITICAL
9.4
CVE-2025-2040 MEDIUM POC
5.3
CVE-2025-3841 MEDIUM POC
4.8
CVE-2024-47590 HIGH
8.8
CVE-2026-44232 HIGH
8.7
CVE-2024-39283 HIGH
8.5
CVE-2024-45481 HIGH
8.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-86206 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy