CVE-2026-86207: Authentication bypass leads to unauthorised access to N-central | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Sep 5, 2026

CVE-2026-86207

Authentication bypass leads to unauthorised access to N-central

7.7

CVSS

1.3%

EPSS

No

On KEV

Description

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

Exploitation

Is it being used?

Exploit prediction (EPSS)1.3% · higher than 69% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

NC

N-central · N-able

before 2026.3.1.13 · source: vendor

Affected product

NC

N-central

N-able

All N-central CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2026-86207

https://www.cve.org/CVERecord?id=CVE-2026-86207

documentation.n-able.com

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF3_Release_Notes.htm

https://me.n-able.com/s/security-advisory/aArVy0000002LUzKAM/cve202686207-authentication-bypass-leads-to-unauthorised-access-to-ncentral

More from N-central

9.8

pre-authentication remote code execution

8.8

Command Injection Vulnerability

8.1

Incomplete patch leads to administrative account takeover

7.8

Insecure Deserialization Vulnerability

7.4

Unauthenticated administrative account takeover