CVE-2026-86218

N-able N-central Pre-Auth RCE Flaw Under Active Exploitation (CVE-2026-86218)

CISA issued an emergency KEV addition for CVE-2026-86218, an unauthenticated static code injection flaw in N-able N-central RMM servers actively exploited against MSP networks.