N Central 2026 3 Hotfix 4 Cve 2026 86218

This hotfix includes security fixes for CVE-2026-86218 which is a critical-CVSS-rated vulnerability that could allow for pre-authenticated remote code execution on the N-central server

This vulnerability was responsibly disclosed by a third party through our security disclosure program. At this time, we have no confirmations that this vulnerability has been exploited in production environments, but unpatched systems remain at risk.

Customers running on-premises N-central deployments should upgrade to N-central 2026.3 HF4 immediately to protect their environment.

Additional Information

This release supersedes N-central 2026.3 Hotfix 3 (build 2026.3.1.13). For details the 2026.3 Hotfix 2 release, see 2026.3 HF3 Release Notes . To learn what’s included in the 2026.3 release, see N-central 2026.3 Release Notes .

Hosted N-central – No action required

If you are on an N-central hosted instance (NCOD), patches have already been applied to your environment. You do not need to do anything at this time.

N-central (self-hosted) – How do I upgrade to the hotfix?

Download and upgrade to 2026.3.1.14 using the instructions provided below and, on the N-able support portal. If you need assistance with the upgrade process, please our support team at

Upgrade Documentation:

Upgrading from legacy versions:

Supported Upgrade Paths

Upgrade directly to 2026.3.1.14 from:

If you are on an older version, we recommend going to any of the builds above , then upgrading to this hotfix version ASAP. If you are unsure of what to do, you can support directly.

Do I need to update my agents too?

While the hotfix itself does not require agents to be upgraded to protect you from CVE-2026-86218. As a best practice we always recommend that you upgrade agents to the latest available version.

For More Information:

Support:

Uptime Page: