N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
CVE-2026-86206
Verified
Description
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
Severity
Critical
CVSS Score
9.8
Exploit Probability
1%
Affected Product
n-central
Published Date
September 8, 2026
Template Author
rapid7, dhiyaneshdk
CVE-2026-86206.yaml
9.8Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-86206
CWE ID:
cwe-284
References
https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/https://me.n-able.com/s/security-advisory/aArVy0000002LTNKA2/cve202686206-access-control-filter-bypass-allows-unauthorised-access-to-apishttps://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF3_Release_Notes.htm
Remediation Steps
Update to version 2026.3 HF3 or 2026.4.