Security1 dSeptember 20, 2026, 09:40

N-able N-central Pre-Auth RCE Highlights RMM Concentration Risk

A static code injection vulnerability in N-able N-central allows pre-authentication remote code execution. CVSS 4.0 score is 10.0; versions below 2026.3.1.14 are affected, with Hotfix 4 as the fix. CISA added the CVE to its exploited catalog on September 8, 2026.

DEV Community Open source

N-able N-central Pre-Auth RCE Highlights RMM Concentration Risk

CVSS 4.0 score 10.0: network access, no privileges or user interaction
N-central below 2026.3.1.14 vulnerable, including Hotfix 3 installs
Fix is N-central 2026.3 Hotfix 4 (2026.3.1.14)
CISA added CVE to KEV September 8, federal deadline September 11

#N-able#CISA

CrowdSec confirms source code stolen in supply chain attack

Security

FBI: scammers impersonate police and demand payment under arrest threats

Security

Spain reports first end-to-end data breach carried out by an AI agent

Security

N-able N-central Pre-Auth RCE Highlights RMM Concentration Risk

CrowdSec confirms source code stolen in supply chain attack

FBI: scammers impersonate police and demand payment under arrest threats

Spain reports first end-to-end data breach carried out by an AI agent

Iranian hackers suspected in attack on Hyundai Glovis tanker off Texas