{"uuid": "2fd8521f-0316-470e-9e61-288ebd4eead8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86207", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117238521729646565", "content": "N-able didn't beat around the bush:\n\nSince our post 9/5/2026, 08:11:00 UTC a third independent researcher disclosed to N-able a new vulnerability\u2014 one that has been exploited in the wild and is unrelated to the previously disclosed CVEs.\nThis critical zero-day vulnerability, CVE-2026-86218, could allow pre-authenticated access to the N-central server if exploited.\n\nhttps://www.n-able.com/blog/n-central-security-hotfix-september-5-2026\nhttps://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/\nhttps://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog\n#nable #zeroday #KEV #CVE", "creation_timestamp": "2026-09-09T01:41:29.685918Z"}