{"uuid": "c2292685-1afc-4917-88f9-95fad7108dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117259614409471183", "content": "Still 218 instances of N-able N-central seen unpatched to CVE-2026-86218 pre-auth RCE that is exploited in the wild & on @cisacyber KEV. Top: US (141)\nStats - World Map view: https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=exchange&source=exchange6&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-86218%2B&data_set=count&scale=log&auto_update=on\nTracker: https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=7&source=exchange&source=exchange6&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-86218%2B&dataset=unique_ips&limit=100&group_by=geo&stacking=stacked&auto_update=on\nIP data in Vulnerable HTTP reporting tagged 'cve-2026-86218': https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\n218 out of 1399 seen in total. This is one week after exploitation activity was first reported publicly. \nPatch info: https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF4_Release_Notes.htm\nBackground on incidents:  https://www.huntress.com/blog/n-able-vulnerability-exploitation", "creation_timestamp": "2026-09-12T19:02:04.235839Z"}