Critical N-able N-central RCE Flaw (CVE-2026-86218) Actively Exploited, CISA Issues Alert

A maximum-severity security flaw, CVE-2026-86218, impacting N-able N-central, is being actively exploited in the wild. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this pre-authentication remote code execution (RCE) vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to apply patches by September 11, 2026. The flaw, described as a static code injection vulnerability, has been addressed in N-central 2026.3 Hotfix 4.