type: cve · created: 2026-09-08 · updated: 2026-09-08 · tags: [cve, rmm, authentication-bypass, exploit] · confidence: medium · severity: high · affected_sectors: [technology] · au_impact: true
CVE-2026-86206
CVE-2026-86206 is one of a prior authentication-bypass pair (with CVE-2026-86207) in N-able's N-central remote monitoring and management (RMM) platform, which MSPs and IT teams use to manage client networks. It was disclosed ahead of the later maximum-severity RCE (CVE-2026-86218).
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-86206 |
| Type | Authentication bypass |
| Product | N-able N-central RMM |
| Source | BleepingComputer — Tier 2/4 |
Organisations running on-premises N-central should apply the relevant hotfix and treat the platform as internet-exposed initial-access risk.