{"vulnerability": "CVE-2026-86206", "sightings": [{"uuid": "1c6e3b79-51d6-4307-b3c1-098ca8e2a1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/e3ftdw6les5zn", "content": "CVE-2026-86206 - Access control filter bypass allows unauthorised access to APIs\nCVE ID : CVE-2026-86206\n \n Published : Sept. 5, 2026, 8:17 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A vulnerability in the N-central internal API access control filter allows unauthorised ac...", "creation_timestamp": "2026-09-05T21:35:14.623237Z"}, {"uuid": "c888d30c-bd66-4c9d-a1fd-32221506ed3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117223674556794414", "content": "A new vulnerability with increased severity was disclosed for N-able N-central (CVE-2026-86206) https://vuldb.com/vuln/399362", "creation_timestamp": "2026-09-06T10:42:03.684918Z"}, {"uuid": "b53f07fb-fd63-4a88-b318-51fcbba0ff55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muw2hsur6t2q", "content": "\ud83e\udd16 CVE-2026-86218 (max severity): unauthenticated RCE in N-able N-central RMM on exposed instances, potential zero-day per Huntress. Auth bypass CVE-2026-86206/-86207 patched too. Fix: N-central 2026.3 Hotfix\u2026", "creation_timestamp": "2026-09-07T08:07:22.790089Z"}, {"uuid": "3d15e471-61bb-40bd-bfea-0a8ceca2e55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3muyymguz422s", "content": "While researching last months N-able N-central exploit (CVE-2026-18577, on KEV), we found and reported a new authentication bypass chain (CVE-2026-86206 and CVE-2026-86207). Patched and disclosed by the vendor over the weekend, full details on the @rapid7.com blog: www.rapid7.com/blog/post/ve...", "creation_timestamp": "2026-09-08T12:12:11.224876Z"}, {"uuid": "850caeba-cf7f-4361-96fe-8f6058b0ee2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86206", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117236471187412679", "content": "New.\nRapid7: CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/ @Rapid7Official #infosec #vulnerability #threatresearch", "creation_timestamp": "2026-09-08T16:56:24.737375Z"}, {"uuid": "ccdeca9a-1f12-4e97-b7a1-d32dd801fffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86206", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117238521729646565", "content": "N-able didn't beat around the bush:\n\nSince our post 9/5/2026, 08:11:00 UTC a third independent researcher disclosed to N-able a new vulnerability\u2014 one that has been exploited in the wild and is unrelated to the previously disclosed CVEs.\nThis critical zero-day vulnerability, CVE-2026-86218, could allow pre-authenticated access to the N-central server if exploited.\n\nhttps://www.n-able.com/blog/n-central-security-hotfix-september-5-2026\nhttps://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/\nhttps://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog\n#nable #zeroday #KEV #CVE", "creation_timestamp": "2026-09-09T01:41:29.624443Z"}, {"uuid": "6495c7aa-d612-449c-a9bb-937695b2a75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://t.me/HackerNewscyber/3417", "content": "\u2708 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc N-central\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644\u00bb (N-able) \u06cc\u06a9 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-86218 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0646\u0638\u0627\u0631\u062a \u00ab\u0627\u0650\u0646\u200c\u0633\u0646\u062a\u0631\u0627\u0644\u00bb \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0627 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0633\u0637\u062d \u0634\u062f\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0648\u06cc\u0698\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u06a9\u0645\u200c\u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u062d\u062f\u0648\u062f \u06f1\u06f5\u06f0\u06f0 \u0633\u0631\u0648\u0631 N-central \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0647\u0627\u0646\u062a\u0631\u0633\u00bb (Huntress) \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u06a9\u0646\u0627\u0631 \u062f\u0648 \u0646\u0642\u0635 \u062f\u06cc\u06af\u0631\u060c CVE-2026-86206 \u0648 CVE-2026-86207\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0627\u0646\u0633\u062a\u0647 \u0627\u0633\u062a. \u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 CVE-2026-86218 \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u0646\u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0641\u0648\u0631\u0627\u064b \u0628\u0647 N-central 2026.3 HF4 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-09T03:00:05.905292Z"}, {"uuid": "422bd177-56ea-490f-ab81-d03a1fcef37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-86206.yaml", "content": "", "creation_timestamp": "2026-09-09T03:00:06.976835Z"}, {"uuid": "605ef33d-0fdb-492a-a03d-f6ccbdb9ca70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5c5oxo22", "content": "Daily IT Security Digest \u2014 2026-09-09\n2. **N-able N-central: Unauthenticated RCE & Auth Bypass (CVE-2026-86206/86207)**\n   N-able N-central, widely used by MSPs to manage IT environments, suffers from both a critical authentication bypass (CVE-2026-86206/86207) and an", "creation_timestamp": "2026-09-09T05:03:44.669589Z"}, {"uuid": "c154cec0-ab7e-4377-bc9a-72a0f10132e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86206", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mv3eav7br52d", "content": "Original text: \"CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)\" \u2014 Stephen Fewer, Rapid7 (September 8, 2026). Code, tables and figures below are reproduced verbatim with attribution\nhttps://core-jmp.org/2026/09/nable-ncentral-authentication-bypass-cve-2026-86206-86207/", "creation_timestamp": "2026-09-09T10:45:46.745543Z"}, {"uuid": "c182d4e4-643c-4e01-a424-f48e4a74e478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv3qoeicrl2g", "content": "CVE-2026-86206, CVE-2026-86207: N-able N\n\n", "creation_timestamp": "2026-09-09T14:28:03.183447Z"}, {"uuid": "c90025c6-56dc-445c-8fae-633eead6fc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-86206.yaml", "content": "", "creation_timestamp": "2026-09-10T00:00:09.457848Z"}, {"uuid": "e456f655-1aad-4a16-9a1c-b65f9bcca650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "seen", "source": "https://t.me/HackerNewscyber/3417", "content": "\u2708 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc N-central\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644\u00bb (N-able) \u06cc\u06a9 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-86218 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0646\u0638\u0627\u0631\u062a \u00ab\u0627\u0650\u0646\u200c\u0633\u0646\u062a\u0631\u0627\u0644\u00bb \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0627 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0633\u0637\u062d \u0634\u062f\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0648\u06cc\u0698\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u06a9\u0645\u200c\u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u062d\u062f\u0648\u062f \u06f1\u06f5\u06f0\u06f0 \u0633\u0631\u0648\u0631 N-central \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0647\u0627\u0646\u062a\u0631\u0633\u00bb (Huntress) \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u06a9\u0646\u0627\u0631 \u062f\u0648 \u0646\u0642\u0635 \u062f\u06cc\u06af\u0631\u060c CVE-2026-86206 \u0648 CVE-2026-86207\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0627\u0646\u0633\u062a\u0647 \u0627\u0633\u062a. \u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 CVE-2026-86218 \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u0646\u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0641\u0648\u0631\u0627\u064b \u0628\u0647 N-central 2026.3 HF4 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-10T00:00:54.963942Z"}, {"uuid": "2388fba6-0732-4264-b244-1ae320f7f1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86206", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-86206.yaml", "content": "", "creation_timestamp": "2026-09-11T00:00:09.150484Z"}]}