Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
N-able has released Hotfix 4 for its N-central platform to address CVE-2026-86218, a critical remote code execution (RCE) vulnerability rated CVSS 10.0. This flaw allows unauthenticated attackers to execute arbitrary code on N-central servers running versions prior to 2026.3.1.14. The vulnerability...
In September 2026, several critical vulnerabilities were disclosed, notably CVE-2026-81963 and CVE-2026-85880, both of which are actively exploited. CVE-2026-81963, affecting Windows Update Stack, allows local privilege escalation without user interaction. CVE-2026-85880, a heap-based buffer overflo...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in Microsoft Windows, Adobe, N-able, Cisco, Google Chromium, Fortinet, and Citrix. Notably, CVE-2026-75650, a critical Ado...
Recent vulnerabilities in remote monitoring and management (RMM) software pose significant risks to managed service providers (MSPs). A critical pre-authentication remote code execution flaw (CVE-2026-86218) in N-able's N-central platform was reported, with confirmed. Additionally, Microsoft SharePo...
