project

N-able N-central

N-able's remote monitoring and management platform, giving managed service providers and IT teams a single console for monitoring and administering large fleets of networks and endpoints.

Current clusters

security1 publisher

Two chained N-central bugs hand an unauthenticated caller a System administrator account

Rapid7 found CVE-2026-86206 and CVE-2026-86207 while pulling on an earlier N-central bypass, and chained they give a remote caller the top account on the console MSPs use to reach client networks. Hotfix 3 closes both.

Publishers:blog.rapid7.com

Reality

Evidence68
Adoption: Insufficient
Hype gap+12
Incentives60
Confidence58