{"vulnerability": "CVE-2026-86218", "sightings": [{"uuid": "911ef1c9-5e44-442a-b894-00a4ce89ee03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mut46pfaww2j", "content": "CVE-2026-86218 - n-central\nVersions of N-central released before 2026.3.1.14 can be tricked into executing malicious commands without any user authentication. This could let an attacker take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ncentral #nable #CVE #infosec", "creation_timestamp": "2026-09-06T04:00:05.135364Z"}, {"uuid": "79e8a39e-0b7e-4b6a-ba5c-9796f4a84fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mut4mpjtgj2w", "content": "\ud83d\udea8 CVE-2026-86218 \u2014 CVSS 10 CRITICAL\n\nN-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86218\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T04:08:06.470472Z"}, {"uuid": "2347b77c-4af1-4994-a112-1c10abffbb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6fgjbo226", "content": "\ud83d\udd34 N-able N-central zero-day under active exploitation\n\nCVE-2026-86218 is a critical pre-auth RCE with CVSS 10.0, and N-able says it has already been exploited in the wild. On-premises customers\n\nstemshop.top/blog/n-able-...\n\n#CVE #CVE202686218 #Nable #NCentral #ZeroDay #RCE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T23:45:01.555947Z"}, {"uuid": "b2be3c53-288f-4132-90fb-40fec628f845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbiz5x2x2m", "content": "Zero-Day Royal Flush: N-central Bleeds Out Before Anyone Blinks\nPANIC 96% | Lag 0.0h | N-able says a critical pre-auth remote code execution flaw in N-central, tracked as CVE-2026-86218, \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-07T00:40:38.956650Z"}, {"uuid": "698169d8-be7f-49a9-b85b-60a7533382f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3muvzsptbck24", "content": "\ud83d\udcf0 N-able Menambal Celah Kritis N-central dengan Severity Maksimum di Tengah Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/07/n-able-n-central-cve-2026-86218-rce/\n\n#cybersecurity #keamananSiber #n-able #n-central #rce #teknologi #vulnerability #zero-day", "creation_timestamp": "2026-09-07T07:55:34.931030Z"}, {"uuid": "897e16f9-7d91-4f59-b3b7-df34c8f37364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muw2hsur6t2q", "content": "\ud83e\udd16 CVE-2026-86218 (max severity): unauthenticated RCE in N-able N-central RMM on exposed instances, potential zero-day per Huntress. Auth bypass CVE-2026-86206/-86207 patched too. Fix: N-central 2026.3 Hotfix\u2026", "creation_timestamp": "2026-09-07T08:07:22.735167Z"}, {"uuid": "f6405652-8ad9-45f1-bf43-f9a8f59adf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3muw4lptjjf2l", "content": "N-able released emergency hotfix 2026.3 HF4 for CVE-2026-86218, a max-severity RCE in N-central that can let unauthenticated attackers execute code on exposed systems. #Ncentral #CVE202686218 #Huntress", "creation_timestamp": "2026-09-07T08:45:22.567149Z"}, {"uuid": "1d2f4bdc-223e-4cf2-9de6-459bf31194e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/thehackernews/9983", "content": "\u203c\ufe0fN-central\u2019s 4th hotfix in five weeks fixes CVE-2026-86218, a CVSS 10.0 unauthenticated RCE flaw.\n\nHotfix 3 servers need updating. N-able\u2019s incident notice reports exploitation; its release notes say it\u2019s unconfirmed.\n\nWhat\u2019s known about exploitation: https://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.html", "creation_timestamp": "2026-09-07T09:00:04.780947Z"}, {"uuid": "fe901d48-6f11-4484-8bbe-7b70a658cd74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muw76hb4e22n", "content": "The N-able N-central vulnerability CVE-2026-86218 is a CVSS 10 pre-auth RCE reported exploited in the wild. Apply 2026.3 HF4 immediately.\n\n#Nable #Ncentral #CVE202686218 #PreAuthRCE #RMM #ZeroDay #Huntress #Infosec", "creation_timestamp": "2026-09-07T09:31:37.810995Z"}, {"uuid": "db60ab0a-4e7d-4ab8-a400-98538d54fa25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muwarzytuh2x", "content": "N-able N-central CRITICAL RCE (CVE-2026-86218) threatens on-prem servers \u2014 1,500+ exposed. Apply Hotfix 4 immediately to prevent remote compromise. Details: https://radar.offseq.com/threat/n-able-patches-max-severity-n-central-flaw-amid-ongoing-attacks-2b55ee46bb903037 #OffSeq #Vulnerability #Pat...", "creation_timestamp": "2026-09-07T10:00:28.764913Z"}, {"uuid": "669779b6-538c-4f99-bc09-65d8d5cc0775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117229173194973876", "content": "CVE-2026-86218: N-able N-central on-prem RCE (CRITICAL) enables unauthenticated code execution. Hotfix 4 (2026.3) required ASAP. Nearly 1,500 exposed servers tracked. Patch now: https://radar.offseq.com/threat/n-able-patches-max-severity-n-central-flaw-amid-ongoing-attacks-2b55ee46bb903037 #OffSeq #Nable #RCE #SysAdmin #Infosec", "creation_timestamp": "2026-09-07T10:00:26.507416Z"}, {"uuid": "fc952ce8-cad3-449c-a64e-ad1a32cf9359", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/48679692-5264-44cc-acde-02dc7f7b229a", "content": "", "creation_timestamp": "2026-09-07T11:00:34.929538Z"}, {"uuid": "b682dcd6-f847-4b6e-b754-776c589c878f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3muwhxpdc3a2j", "content": "N-ablen N-central-alustasta l\u00f6ytyi uusi kriittinen nolla-p\u00e4iv\u00e4-haavoittuvuus CVE-2026-86218, vain p\u00e4iv\u00e4 sen j\u00e4lkeen kun yll\u00e4pit\u00e4j\u00e4t olivat paikkaamassa kahta muuta virhett\u00e4.\n\n#kyberturvallisuus", "creation_timestamp": "2026-09-07T12:08:55.306384Z"}, {"uuid": "20613db5-faec-4a19-888d-55c160e6957c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3muwijjivoc25", "content": "N-able Patches CVE-2026-86218: Pre-Auth RCE with CVSS 10.0 and Contradictory Messaging", "creation_timestamp": "2026-09-07T12:18:52.496545Z"}, {"uuid": "85e1c967-d82a-4b11-88ed-6f91960afb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3muwj7walvj2n", "content": "N-able\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u7dca\u6025\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027N-central(CVE-2026-86218)\u3092\u4fee\u6b63\n\nN-able\u306f\u3001MSP(\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc)\u306b\u4eba\u6c17\u306e\u30ea\u30e2\u30fc\u30c8\u76e3\u8996\u30fb\u7ba1\u7406(RMM)\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cN-central\u300d\u306b\u5f71\u97ff\u3059\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u8106\u5f31\u6027CVE-2026-86218\u306b\u5bfe\u3057\u3001\u7dca\u6025\u30db\u30c3\u30c8\u30d5\u30a3\u30c3\u30af\u30b9\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 N-able\u306f\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u306e\u4e2d\u3067\u3001CVE-202", "creation_timestamp": "2026-09-07T12:31:24.035343Z"}, {"uuid": "4f00381e-aa72-4550-9f43-5c0e8f19f49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3muwkyzra3z23", "content": "N-able shipped a fourth hotfix for N-central, CVE-2026-86218, an unauthenticated RCE rated 10.0 that Hotfix 3 did not close. Shadowserver counts nearly 1,500 N-central servers exposed online, and Huntress found one already compromised. status.n-able.com/2026/0...", "creation_timestamp": "2026-09-07T13:03:20.072390Z"}, {"uuid": "0d57bbf8-1924-4390-a481-b6362e603bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3muwllsviwx26", "content": "N-able released N-central 2026.3 Hotfix 4 to address CVE-2026-86218, a critical pre-authenticated remote code execution vulnerability. This flaw could allow unauthenticated attackers to execute code on exposed N-central servers.", "creation_timestamp": "2026-09-07T13:13:52.009655Z"}, {"uuid": "539a47b7-2f88-4627-aa9b-ce818f8ad747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3muwlolyqia2c", "content": "N-able released Hotfix 4 for N-central to fix CVE-2026-86218, a critical pre-auth RCE affecting on-prem builds before 2026.3.1.14. Notices differ on exploitation status. #Ncentral #CVE202686218 #Nable", "creation_timestamp": "2026-09-07T13:15:24.578109Z"}, {"uuid": "baadf579-ddd6-464a-a386-0adb9c128ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3muwnnyjkk62q", "content": "CVE-2026-86218\u3001CVSS 10\u306e\u30d7\u30ea\u8a8d\u8a3cRCE\u304c\u5b9f\u74b0\u5883\u3067\u60aa\u7528\n\n\u8981\u70b9 N-able\u306f2026\u5e749\u67086\u65e5\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u30bc\u30ed\u30c7\u30a4\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308b\u7dca\u6025\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306eN-central\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u306e\u672a\u8a8d\u8a3c\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u7ba1\u7406\u8005\u306f\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u30a2\u30d7\u30e9\u30a4\u30a2...", "creation_timestamp": "2026-09-07T13:50:50.809440Z"}, {"uuid": "5589c21a-eb70-4669-be18-c533f3d46e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3muwo73ykog27", "content": "N-able released an emergency hotfix for CVE-2026-86218, a critical zero-day in N-central that can allow pre-auth remote code execution. Reports indicate possible in-the-wild exploitation. #Nable #Ncentral #CVE202686218", "creation_timestamp": "2026-09-07T14:00:25.566267Z"}, {"uuid": "4beeb48f-9705-4bf3-bf93-167ce75554e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3muwpqoccc22g", "content": "N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)\n\nwww.helpnetsecurity.com/2026/09/07/n...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-09-07T14:28:09.540809Z"}, {"uuid": "c3a690a5-f57a-4076-9bf2-9231ae839a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117230492903072022", "content": "New.\nTanto Security: From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/\nMore:\nThe Hacker News: Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE \u2014 Public Exploit Released https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/\nAlso:\nN-able issued another fix yesterday https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/\nN-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw https://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.html #vulnerability  #Oracle #infosec", "creation_timestamp": "2026-09-07T15:36:03.545821Z"}, {"uuid": "99c4445b-7d94-4014-9d4f-eb0701fe37ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-n-central-van-n-able-update-nu", "content": "", "creation_timestamp": "2026-09-07T16:15:47.734861Z"}, {"uuid": "0c80adce-9e2a-465e-ba00-af2ff315522e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230953424707944", "content": "\ud83d\udcf0 N-able N-central Hit by Actively Exploited CVSS 10.0 RCE Flaw\n\ud83d\udea8 URGENT: N-able N-central is being actively exploited via a CVSS 10.0 RCE zero-day (CVE-2026-86218). Unauthenticated attackers can take over RMM servers. On-prem customers must apply Hotfix 4 immediately. #CyberSecurity #RMM #MSP\n\ud83d\udd17 https://cyber.netsecops.io/articles/n-able-n-central-critical-rce-zero-day-cve-2026-86218-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:12.619349Z"}, {"uuid": "f156a994-17a6-4ce1-83c0-f2a514832c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24cfazv2v", "content": "\ud83d\udea8 URGENT: N-able N-central is being actively exploited via a CVSS 10.0 RCE zero-day (CVE-2026-86218). Unauthenticated attackers can take over RMM servers. On-prem customers must apply Hotfix 4 immediately. #CyberSecurity #RMM #MSP\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:36.221080Z"}, {"uuid": "c90cf137-e561-4fda-b773-3071d008662a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "exploited", "source": "https://t.me/thehackernews/9983", "content": "\u203c\ufe0fN-central\u2019s 4th hotfix in five weeks fixes CVE-2026-86218, a CVSS 10.0 unauthenticated RCE flaw.\n\nHotfix 3 servers need updating. N-able\u2019s incident notice reports exploitation; its release notes say it\u2019s unconfirmed.\n\nWhat\u2019s known about exploitation: https://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.html", "creation_timestamp": "2026-09-08T00:00:51.125908Z"}, {"uuid": "25dc3f5f-55aa-46f5-981f-1ce5540e5f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3muy7kz3ihg2t", "content": "N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)\uff08N-able\u3001\u5b9f\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308bN-central\u306e\u91cd\u5927\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u4fee\u6b63\uff09 #HelpNetSecurity (Sep 7)\n\nwww.helpnetsecurity.com/2026/09/07/n...", "creation_timestamp": "2026-09-08T04:43:58.151581Z"}, {"uuid": "2266138c-4b0b-43c9-9063-fbcd02a5c072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muxzrqpbih2e", "content": "N-able N-central RMM: pre-auth RCE, CVSS 10.0. All versions before 2026.3.1.14 are affected. CVE-2026-86218. Patch now. #infosec https://0daynews.com/articles/2026-09-06-n-central-cve-2026-86218-preauth-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1207", "creation_timestamp": "2026-09-08T03:00:21.933717Z"}, {"uuid": "2f79bf42-c38d-4093-af60-21a380d5f36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muy7sbdprx2u", "content": "CVE-2026-86218 is trending. Hype score 6, currently #8 on cvemon.\n\nN-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-86218", "creation_timestamp": "2026-09-08T04:48:01.284360Z"}, {"uuid": "3efb8e63-bad8-4027-84d6-cca350529138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3muyy2zfplh2e", "content": "A CVSS 10.0 RCE actively exploited in N-able N-central (CVE-2026-86218)? That's an all-hands-on-deck product moment. Admins, drop everything and apply Hotfix 4. The urgency here is off the charts.", "creation_timestamp": "2026-09-08T12:02:25.140937Z"}, {"uuid": "bf94fe48-3f8f-4bd6-8ede-b27f214c420d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muysw6rf3r2r", "content": "CVE-2026-86218 \u2014 unauthenticated remote code execution in N-able N-central. CVSS 4.0 score: 10.0. Fix is in 2026.3.1.14. MSPs\u2026 https://0daynews.com/articles/2026-09-06-n-central-cve-2026-86218-preauth-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1208", "creation_timestamp": "2026-09-08T10:30:13.888979Z"}, {"uuid": "afab86bd-b2f3-4411-a476-7231169f7750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3muyu762x7j2n", "content": "N-able released an urgent hotfix for a zero-day RCE in N-central (CVE-2026-86218) and urges on-prem users to patch immediately and review logs.\n", "creation_timestamp": "2026-09-08T10:53:09.323220Z"}, {"uuid": "33c2649c-4528-4ba2-a911-b94bdcd9ecf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3muyv3w5blq2i", "content": "Patch on-prem N-able N-central now: CVE-2026-86218 (CVSS 10.0) unauthenticated RCE, exploitation reported by N-able. Apply 2026.3 Hotfix 4 (build 2026.3.1.14) or restrict access to VPN. https://securityweek.com/n-able-patches-critical-zero-day-in-n-central", "creation_timestamp": "2026-09-08T11:09:14.587186Z"}, {"uuid": "7e9c4a4f-4abb-435e-a13f-3e5b85e1f8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3muz2bx7fys25", "content": "N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)\n\nN-able released an emergency hotfix for CVE-2026-86218, a remote code execution (RCE) flaw affecting N-central, its remote monitoring and management (RMM) solution popular with managed service provi\u2026\n#hackernews #news", "creation_timestamp": "2026-09-08T12:42:05.245080Z"}, {"uuid": "8c09ea6d-0760-4d38-9033-653221d55c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117236103483011836", "content": "\ud83d\udcf0 N-able N-central Hit by Actively Exploited CVSS 10.0 RCE Flaw\n\ud83d\udea8 URGENT: N-able N-central is being actively exploited via a CVSS 10.0 RCE zero-day (CVE-2026-86218). Unauthenticated attackers can take over RMM servers. On-prem customers must apply Hotfix 4 immediately. #CyberSecurity #RMM #MSP\n\ud83d\udd17 https://cyber.netsecops.io/articles/n-able-n-central-critical-rce-zero-day-cve-2026-86218-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-08T15:22:55.351023Z"}, {"uuid": "e3f73881-c443-41a1-a50e-47666e74c250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3muzdcbq2vh2l", "content": "\ud83d\udea8 URGENT: N-able N-central is being actively exploited via a CVSS 10.0 RCE zero-day (CVE-2026-86218). Unauthenticated attackers can take over RMM servers. On-prem customers must apply Hotfix 4 immediately. #CyberSecurity #RMM #MSP\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-08T15:23:19.497779Z"}, {"uuid": "88d8b70c-f36a-462b-9dd7-7efeca92413c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muzfni36ve2i", "content": "~Cybergcca~\nN-able, MikroTik and Adobe report vulnerabilities exploited in the wild; patch affected systems.\n-\nIOCs: CVE-2026-86218, CVE-2026-67276, CVE-2026-75650\n-\n#CVE #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-08T16:05:22.956708Z"}, {"uuid": "f6e446ac-4570-452c-906d-eb00419fce97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/n-able-security-advisory-av26-885", "content": "", "creation_timestamp": "2026-09-08T16:15:06.446261Z"}, {"uuid": "6cc09410-d7ef-4808-abde-39f8d7eca51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzh752xok2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-86218: N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.\nCVSS 10 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-86218\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T16:33:08.876958Z"}, {"uuid": "04d8835e-d701-4c78-923d-964bb96a5664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3muzir7wzdz2n", "content": "N-able's N-central zero-day (CVE-2026-86218) RCE is bad enough, but saying it's *not* exploited publicly while privately telling customers it *is*? That's a whole new level of trust issue.", "creation_timestamp": "2026-09-08T17:01:10.324695Z"}, {"uuid": "bfa3a7cb-c84c-46db-b09a-05e38fe46b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3muzov7csea2w", "content": "\ud83d\uded1 CVE-2026-86218\nN-able N-central\nCVSS 10.0 / EPSS 0% / KEV: No\nTL;DR: N-central is vulnerable to a pre-auth remote code execution This issue affects N-central:\u2026\nhttps://cvesentinel.com/report/CVE-2026-86218?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-08T18:50:45.747595Z"}, {"uuid": "9f43b434-48f3-4fec-afad-79ff0e6a5c1f", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25f2b2d4-35a6-46c5-82c0-07e78979660d", "content": "", "creation_timestamp": "2026-09-08T19:00:02.422362Z"}, {"uuid": "d41f4b61-a2dd-484e-8fbc-77bfe8b85dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv23vl522k2c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-86218: N-able N-central Static Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-86218", "creation_timestamp": "2026-09-08T22:43:36.849844Z"}, {"uuid": "e1741c29-8928-46d3-b1be-c451a65bb599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117238521729646565", "content": "N-able didn't beat around the bush:\n\nSince our post 9/5/2026, 08:11:00 UTC a third independent researcher disclosed to N-able a new vulnerability\u2014 one that has been exploited in the wild and is unrelated to the previously disclosed CVEs.\nThis critical zero-day vulnerability, CVE-2026-86218, could allow pre-authenticated access to the N-central server if exploited.\n\nhttps://www.n-able.com/blog/n-central-security-hotfix-september-5-2026\nhttps://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/\nhttps://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog\n#nable #zeroday #KEV #CVE", "creation_timestamp": "2026-09-09T01:41:29.550149Z"}, {"uuid": "e3bd7e11-966a-47c6-a7c4-987cc33d1e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv2ix4fiu32u", "content": "\ud83d\udccc CVE-2026-86218 - N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. https://www.cyberhub.blog/cves/CVE-2026-86218", "creation_timestamp": "2026-09-09T02:37:07.856523Z"}, {"uuid": "8430e309-a24f-48eb-8806-b8c33d43df11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/HackerNewscyber/3417", "content": "\u2708 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc N-central\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644\u00bb (N-able) \u06cc\u06a9 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-86218 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0646\u0638\u0627\u0631\u062a \u00ab\u0627\u0650\u0646\u200c\u0633\u0646\u062a\u0631\u0627\u0644\u00bb \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0627 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0633\u0637\u062d \u0634\u062f\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0648\u06cc\u0698\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u06a9\u0645\u200c\u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u062d\u062f\u0648\u062f \u06f1\u06f5\u06f0\u06f0 \u0633\u0631\u0648\u0631 N-central \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0647\u0627\u0646\u062a\u0631\u0633\u00bb (Huntress) \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u06a9\u0646\u0627\u0631 \u062f\u0648 \u0646\u0642\u0635 \u062f\u06cc\u06af\u0631\u060c CVE-2026-86206 \u0648 CVE-2026-86207\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0627\u0646\u0633\u062a\u0647 \u0627\u0633\u062a. \u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 CVE-2026-86218 \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u0646\u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0641\u0648\u0631\u0627\u064b \u0628\u0647 N-central 2026.3 HF4 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-09T03:00:06.168745Z"}, {"uuid": "6a914ca4-4578-439b-8069-b2dcff2a3f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv2kagy2qt2c", "content": "N-central servers under active attack. CVE-2026-86218 is a CVSS 10.0 pre-auth RCE in N-able's RMM platform. Patch to\u2026 https://0daynews.com/articles/2026-09-07-n-central-cve-2026-86218-exploitation-confirmed/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1275", "creation_timestamp": "2026-09-09T03:00:14.283711Z"}, {"uuid": "558c5b22-7d1f-4995-89b5-ae4c14c1cbfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mv2nqcdsnn2e", "content": "\ud83d\udd0d DETAIL: Chrome CVE-2026-85046 (V8 type confusion, CVSS 8.8) exploited in wild \u2014 6th 2026 Chrome 0-day. Also: N-central CVE-2026-86218 CVSS 10.0 pre-auth RCE actively exploited. Enterprise perimeter devices top targets. #ThreatIntel", "creation_timestamp": "2026-09-09T04:02:47.194372Z"}, {"uuid": "0f434712-b520-46dd-8986-a9efbcb11f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mv2nrdlete2n", "content": "\ud83d\udcda SOURCES: BleepingComputer (BigBear 2.0), TheHackerNews (Chrome 0-day CVE-2026-85046), Huntress (N-central CVE-2026-86218), TheHackerNews (JSCeal malware session cookie theft), CISA KEV catalog. #InfoSec", "creation_timestamp": "2026-09-09T04:03:22.220730Z"}, {"uuid": "844d0905-c50d-4257-aa8e-d5085109ac29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mv2pnejpam2f", "content": "CVE-2026-86218 in N-able N-central allows unauthenticated RCE\u2014Hotfix 4 must be applied now. #Nable #CVE2026-86218 #RemoteCodeExecution #MSPsecurity #Cybersecurity #Hotfix4 https://thedailytechfeed.com/critical-n-able-n-central-flaw-lets-attackers-bypass-auth-and-execute-code/", "creation_timestamp": "2026-09-09T04:36:58.018586Z"}, {"uuid": "26d8d0e1-ecd7-4c8a-9859-87b2aeb42a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mv2rumk6av2e", "content": "CISA added CVE-2026-86218 in N-able N-central to KEV, requiring FCEB agencies to patch by September 11, 2026.\n", "creation_timestamp": "2026-09-09T05:16:47.617095Z"}, {"uuid": "9a4cb65d-2bbd-4ed7-8087-eff80a094e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv2qsadm6u24", "content": "\ud83e\udd16 CVE-2026-86218 (CVSS 10.0): pre-auth RCE in N-able N-central, actively exploited in the wild. CISA added it to KEV; FCEB patch deadline Sept 11, 2026.\nhttps://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "creation_timestamp": "2026-09-09T04:57:33.758284Z"}, {"uuid": "bf7e22fb-d1d7-4dcf-8ea5-6f42dc7545d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv2seza6mk2d", "content": "CISA added CVE-2026-86218 in N-able N-central to KEV, requiring FCEB agencies to patch by September 11, 2026.\n", "creation_timestamp": "2026-09-09T05:25:57.803082Z"}, {"uuid": "9cf352bc-885f-4d65-a09f-bcc673c906e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/GithubRedTeam/101486", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86218\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 08:54:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86218 - Draft or TODO - N-central is vulnerable to a pre-auth remote code execution\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:07.383972Z"}, {"uuid": "71eac6b5-f8e0-4ddb-9c87-6cfbb403adfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv2v4hduds23", "content": "Security Patch now! Hackers are targeting yet another N-able N-central vulnerability CVE-2026-86218 is a perfect 10 vulnera\u2026\n\nwww.cyberdaily.au/security/141...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-09T06:14:52.743852Z"}, {"uuid": "286af086-e4e7-403b-bc60-8b77064ba293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5cgl6x2z", "content": "Daily IT Security Digest \u2014 2026-09-09\nflaw (CVE-2026-86218). Hotfix 4 must be applied immediately to all instances. N-able has acknowledged both flaws and released the fix.", "creation_timestamp": "2026-09-09T05:03:45.223915Z"}, {"uuid": "30d089f9-7cea-4e8f-8ab4-923ce0a79768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv2vzau5yl2n", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-86218: \u26a0\ufe0f CVE-2026-86218: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-86218-n-central-is-vulnerable-to-a-pre-auth", "creation_timestamp": "2026-09-09T06:30:57.370944Z"}, {"uuid": "ff80ecc3-d48c-49a3-abdb-56b1de6567d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mv2w42ahh32p", "content": "Une faille critique RCE pr\u00e9-auth dans #Nable N-central (CVE-2026-86218, score 10.0) est exploit\u00e9e. #CISA exige un correctif avant le 11/09/2026 pour les agences f\u00e9d\u00e9rales US. \ud83d\udea8 #CyberSecurity #Automatisation ", "creation_timestamp": "2026-09-09T06:32:31.885058Z"}, {"uuid": "9c0d514a-c1da-4766-affe-198cbe5f8a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mv2w43ed7r2n", "content": "Une faille critique RCE pr\u00e9-auth dans #Nable N-central (CVE-2026-86218, score 10.0) est exploit\u00e9e. #CISA exige un correctif avant le 11/09/2026 pour les agences f\u00e9d\u00e9rales US. \ud83d\udea8 #PotatoSecurity #Automatisation ", "creation_timestamp": "2026-09-09T06:32:32.506162Z"}, {"uuid": "4c263b55-9f9e-47e1-8d0e-d79a9517fee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by September 11, 2026.\n\nThe vulnerability in question is CVE-2026-86218 (CVSS score: 10.0), which has been described as a", "creation_timestamp": "2026-09-09T07:02:39.704410Z"}, {"uuid": "7bb1582d-819d-4e0b-8c00-a1df2266f1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv2y5fahna2v", "content": "Patch N-able N-central on-prem now \u2014 CVE-2026-86218 (CVSS 10.0) pre-auth RCE is under active exploitation and on CISA KEV. Upgrade to 2026.3 Hotfix 4. https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "creation_timestamp": "2026-09-09T07:09:04.628946Z"}, {"uuid": "6e65dba6-e9fa-4e48-a5ec-10f6a003da7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "exploited", "source": "https://t.me/thehackernews/10005", "content": "\u26a0\ufe0f N-able says CVE-2026-86218 is being exploited in the wild. The CVSS 10.0 N-central flaw can enable pre-auth RCE.\n\nCISA added it to KEV, while Huntress is probing a separate N-central compromise where the exploit used remains unconfirmed.\n\nRead: https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "creation_timestamp": "2026-09-09T08:00:06.507188Z"}, {"uuid": "d587a1ef-0be5-459b-bd62-fd17f3f21f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv32zbyp4c2l", "content": "CISA added CVE-2026-86218 to the KEV catalog after N-able said the N-central flaw was exploited in the wild. The pre-auth RCE issue is fixed in N-central 2026.3 Hotfix 4. #CVE202686218 #Nable #Ncentral", "creation_timestamp": "2026-09-09T08:00:27.857942Z"}, {"uuid": "2f843912-8863-4f55-9d00-a0e4946583ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355", "content": "On September 9, 2026, Microsoft released a record-breaking Patch Tuesday update addressing 972\u2013974 vulnerabilities, including 113 critical flaws and two actively exploited zero-days across Windows, Office, and SQL. The digest also highlights several high-severity CVEs: a CVSS 10.0 pre-auth RCE in N-able N-central (CVE-2026-86218) added to CISA\u2019s KEV catalog with a federal patch deadline of Sept 11; an authenticated RCE in the WordPress FireBox plugin (CVE-2026-76801); and a high-severity out-of-bounds write in Android\u2019s Keymaster trustlet (CVE-2026-21085). Finally, the update covers emerging AI cybersecurity trends, featuring Alovia\u2014a new security layer for AI-driven platforms\u2014and ongoing industry discussions on the escalating AI arms race and agentic AI applications for both attackers and defenders.", "creation_timestamp": "2026-09-09T08:11:50.512612Z"}, {"uuid": "372bdb1b-042c-4fcd-811c-1a6945f2dbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "Telegram/xiHjUdsZxsfs6FBnVlA4_hPaRcRYxECC7U-bBXwHCFoyBA", "content": "", "creation_timestamp": "2026-09-09T09:00:11.104655Z"}, {"uuid": "48d3017a-fa5c-4fd0-a976-b4444bcc59a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mv36m74he225", "content": "CISA added CVE-2026-86218, a maximum-severity static code injection vulnerability in N-able N-central, to its Known Exploited Vulnerabilities catalog. The flaw, [\u2026]", "creation_timestamp": "2026-09-09T09:04:44.544522Z"}, {"uuid": "f2697110-7761-4dad-b1ba-f7b37c9f9537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://www.acn.gov.it/portale/w/n-able-rilevato-sfruttamento-in-rete-della-cve-2026-86218-in-n-central", "content": "", "creation_timestamp": "2026-09-09T12:15:11.418149Z"}, {"uuid": "6dcd1c66-93c4-4983-99d4-3de20766501b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mv3j2xrhu32u", "content": "CVSS 10.0. Pre-auth RCE. This is as bad as it gets.\n\nN-Able N-Central.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-86218-n-central-unauthenticated-rce-exploited-poc/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-09-09T12:11:56.946458Z"}, {"uuid": "830b089a-9e66-4a1c-a895-dea7c9524a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mv3lomcqgc2g", "content": "N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day dev.to/anoymask/n-a...", "creation_timestamp": "2026-09-09T12:58:46.452761Z"}, {"uuid": "6eccb530-a7b0-48e8-b703-2b80968fd4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv3p4ju67b2g", "content": "N-central hotfix 4 (2026.3.1.14) drops, obsoleting hotfix 3. CVE-2026-86218 is actively exploited RCE \u2014 fourth patch in five weeks for\u2026 https://0daynews.com/articles/2026-09-07-n-central-hotfix-4-patch-again/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1313", "creation_timestamp": "2026-09-09T14:00:11.805555Z"}, {"uuid": "6855dac8-5697-4515-a73b-76f993d3254d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117242018497653124", "content": "New.\nPress release: \nCISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats https://www.cisa.gov/news-events/news/cisa-releases-updated-insider-threat-guide-new-insights-mitigate-physical-and-cyber-threats \nThe guide: https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide\nUpdates to the Kev catalogue:\n- CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-85880 #Microsoft #Windows \n- CVE-2026-86218: N-able N-central Static Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-86218\n- CVE-2026-81963: Microsoft Windows Link Following Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-81963\n- CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-75650 #Adobe \nYesterday:\nJoint advisory: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-09T16:27:10.143273Z"}, {"uuid": "80f0f801-075d-4d4b-b27b-d36bc032a3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mv3xok73qz2v", "content": "CISA put CVE-2026-86218 on the Known Exploited Vulnerabilities list yesterday, September 8, and for those of you who don't spend your afternoons reading federal advisories (who does?), it's a pre-authentication remote\u2026\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-09T16:33:26.079740Z"}, {"uuid": "8241b375-428d-48db-8d05-1425e26b10bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9", "content": "**September 9, 2026 Cyber Threat Intelligence Summary**\n\nThis briefing highlights multiple critical vulnerabilities with active exploitation, state-sponsored espionage activity, and a major data breach:\n\n* **Actively Exploited Vulnerabilities:** Google Chrome (CVE-2026-87491), ConnectWise ScreenConnect (CVE-2026-84869), and N-able N-central (CVE-2026-86218/86207) are confirmed active in the wild. Chrome and N-able are now listed on CISA\u2019s KEV database. Immediate updates are strongly advised.\n* **Critical & High-Risk Flaws:** Check Point gateways face authentication bypass and RCE; SkillTree has a critical (9.6) stored XSS enabling admin takeover; Fast-DDS suffers a critical out-of-bounds read risking heap memory disclosure and ASLR bypass; Ansible\u2019s memcached plugin allows RCE via insecure deserialization.\n* **Espionage Activity:** The undocumented BlueMoon exploit kit, chaining Chrome and Windows vulnerabilities, is actively deployed by multiple espionage groups, with initial attribution to China-aligned APT31.\n* **Data Breach:** The FBI is investigating the dark web sale of 153 million driver\u2019s license records.\n* **Other Advisories:** MISP requires an immediate patch to fix a sharing group authorization flaw.\n\n**Recommendation:** Prioritize patching Chrome, ConnectWise, N-able, and Check Point systems, remediate exposed critical flaws, and enhance detection for BlueMoon/APT31 activity.", "creation_timestamp": "2026-09-09T20:03:03.918953Z"}, {"uuid": "9911102f-299a-457b-a496-50b57f3697b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "exploited", "source": "https://t.me/thehackernews/10005", "content": "\u26a0\ufe0f N-able says CVE-2026-86218 is being exploited in the wild. The CVSS 10.0 N-central flaw can enable pre-auth RCE.\n\nCISA added it to KEV, while Huntress is probing a separate N-central compromise where the exploit used remains unconfirmed.\n\nRead: https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "creation_timestamp": "2026-09-10T00:00:49.170687Z"}, {"uuid": "70a9d943-0dfd-46ab-8862-aee79be8fed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101486", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86218\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 08:54:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86218 - Draft or TODO - N-central is vulnerable to a pre-auth remote code execution\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.248188Z"}, {"uuid": "51d7cc61-00ce-4f68-801e-b2a26ee46520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "exploited", "source": "Telegram/xiHjUdsZxsfs6FBnVlA4_hPaRcRYxECC7U-bBXwHCFoyBA", "content": "", "creation_timestamp": "2026-09-10T00:00:46.379294Z"}, {"uuid": "e2f4c734-27f8-4cc0-a19b-eef239f4905e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/HackerNewscyber/3417", "content": "\u2708 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc N-central\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644\u00bb (N-able) \u06cc\u06a9 \u0648\u0635\u0644\u0647 \u0627\u0636\u0637\u0631\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-86218 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0646\u0638\u0627\u0631\u062a \u00ab\u0627\u0650\u0646\u200c\u0633\u0646\u062a\u0631\u0627\u0644\u00bb \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0627 \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0633\u0637\u062d \u0634\u062f\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u062f\u0648\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0648\u06cc\u0698\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u06a9\u0645\u200c\u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u062d\u062f\u0648\u062f \u06f1\u06f5\u06f0\u06f0 \u0633\u0631\u0648\u0631 N-central \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u00ab\u0647\u0627\u0646\u062a\u0631\u0633\u00bb (Huntress) \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u06a9\u0646\u0627\u0631 \u062f\u0648 \u0646\u0642\u0635 \u062f\u06cc\u06af\u0631\u060c CVE-2026-86206 \u0648 CVE-2026-86207\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0627\u0646\u0633\u062a\u0647 \u0627\u0633\u062a. \u0627\u0650\u0646\u200c\u0627\u06cc\u0628\u0644 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 CVE-2026-86218 \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u0646\u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0641\u0648\u0631\u0627\u064b \u0628\u0647 N-central 2026.3 HF4 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-10T00:00:54.919662Z"}, {"uuid": "3a0f4656-07a7-475f-a643-08dfd0981d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by September 11, 2026.\n\nThe vulnerability in question is CVE-2026-86218 (CVSS score: 10.0), which has been described as a", "creation_timestamp": "2026-09-10T01:00:34.094767Z"}, {"uuid": "c2cab392-a574-4a32-9b62-f7b08c2ecaa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://www.acn.gov.it/portale/w/n-able-rilevato-sfruttamento-in-rete-della-cve-2026-86218-in-n-central", "content": "Gli aggiornamenti di sicurezza rilasciati da N-able sanano tre vulnerabilit\u00e0, di cui una con gravit\u00e0 \"critica\" ed una con gravit\u00e0 \"alta\", in N-central, piattaforma per il monitoraggio e la gestione remota delle infrastrutture IT. Tra queste si segnala la CVE-2026-86218 che risulta essere attivamente sfruttata in rete.", "creation_timestamp": "2026-09-10T01:00:37.763067Z"}, {"uuid": "7116e668-11f0-4ae9-83bb-e86f30b843b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mv5et2yrl522", "content": "\ud83d\udd0d DETAIL: Chrome CVE-2026-85046 (V8 type confusion, CVSS 8.8) exploited in wild \u2014 6th 2026 Chrome 0-day. Also: N-central CVE-2026-86218 CVSS 10.0 pre-auth RCE actively exploited. Enterprise perimeter devices top targets. #ThreatIntel", "creation_timestamp": "2026-09-10T06:01:16.150785Z"}, {"uuid": "352c9827-fc08-4be2-b6c1-17d22ef2cafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mv5eu4oyh32g", "content": "\ud83d\udcda SOURCES: BleepingComputer (BigBear 2.0), TheHackerNews (Chrome 0-day CVE-2026-85046), Huntress (N-central CVE-2026-86218), TheHackerNews (JSCeal malware session cookie theft), CISA KEV catalog. #InfoSec", "creation_timestamp": "2026-09-10T06:01:51.273276Z"}, {"uuid": "50541a51-729d-496d-9b37-90c0cbd0f7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mv5z7rh5ls22", "content": "CVSS 10.0. You don't see that score often. N-Able N-Central, pre-auth remote code execution. No credentials. No user interaction. An attacker just walks in. If your...\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-86218-n-central-unauthenticated-rce-exploited-poc/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-09-10T12:06:16.667891Z"}, {"uuid": "1464554f-7c79-41fb-ab5d-7fbb35239bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv67sqpufg2t", "content": "Discover the severe N-central CVE-2026-86218 vulnerability allowing unauthenticated RCE. Learn about N-able HF4 patches, CISA mandates, and threat actors.\n\n#Ncentral #CVE202686218 #CyberSecurity #ZeroDay #Vulnerability", "creation_timestamp": "2026-09-10T14:04:16.042516Z"}, {"uuid": "11e20193-ce22-4ee0-b0a0-9ab3a743faa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3mv6otmsqfk2e", "content": "New (draft) @metasploit-r7.bsky.social exploit module in the queue for the latest N-able N-central unauth RCE, CVE-2026-86218. Already being exploit in-the-wild, was disclosed five day ago, added to KEV two days ago. github.com/rapid7/metas...", "creation_timestamp": "2026-09-10T18:33:13.937759Z"}, {"uuid": "4248334d-c6a4-477f-89d0-cb9e19bf89cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/pphm_HackerNews/3101", "content": "\ud83d\udd34 U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:\n\n- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability\n\n- CVE-2026-81963 Microsoft Windows Link Following Vulnerability\n\n- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability\n\n- CVE-2026-86218 N-able N-central Static Code Injection Vulnerability", "creation_timestamp": "2026-09-10T20:00:09.647747Z"}, {"uuid": "a4334608-7bc5-4a57-b066-2b9c4465186d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/CyberDispatch/2890", "content": "N-able says CVE-2026-86218 is being exploited in the wild. The CVSS 10.0 N-central flaw can enable pre-auth RCE.\n\nCISA added it to KEV, while Huntress is probing a separate N-central compromise where the exploit used remains unconfirmed.", "creation_timestamp": "2026-09-11T01:00:03.538976Z"}, {"uuid": "53c50703-0125-4951-8509-6377b1a4018c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/pphm_HackerNews/3101", "content": "\ud83d\udd34 U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:\n\n- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability\n\n- CVE-2026-81963 Microsoft Windows Link Following Vulnerability\n\n- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability\n\n- CVE-2026-86218 N-able N-central Static Code Injection Vulnerability", "creation_timestamp": "2026-09-11T00:00:28.083756Z"}, {"uuid": "ea3ce126-825a-494a-8fc2-40b6d7690c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://t.me/CyberDispatch/2856", "content": "N-central\u2019s 4th hotfix in five weeks fixes CVE-2026-86218, a CVSS 10.0 unauthenticated RCE flaw.\n\nHotfix 3 servers need updating. N-able\u2019s incident notice reports exploitation; its release notes say it\u2019s unconfirmed.", "creation_timestamp": "2026-09-11T01:00:03.766887Z"}]}