N-able issues hotfix for N-central zero-day
Image: Primary N-able released an urgent hotfix for CVE-2026-86218, a critical unauthenticated remote-code-execution vulnerability in its N-central endpoint-management platform. The company said the flaw had been exploited as a zero-day and that on-premises users should apply the 2026.3 HF4 hotfix; hosted environments received server-side patches.
Huntress observed attacks targeting N-central's API and appliance logs beginning September 4. Administrators were also advised to review logs for scanning activity and check for unfamiliar user accounts. The hotfix supersedes patches for two earlier N-central flaws.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
