Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

5 result(s)

Export this search: RSS · CSV · STIX

CVE-2026-86218 Critical · 9.8 KEV Urgent · 82 Public exploit CWE-96 Sep 6, 2026

N-able N-central Static Code Injection Vulnerability

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

CVE-2026-18577 High · 8.1 KEV High · 68 Public exploit CWE-288 Aug 2, 2026

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

CVE-2026-18556 High · 7.4 KEV High · 64 Public exploit CWE-288 Aug 1, 2026

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

CVE-2025-8875 High · 7.8 KEV High · 59 Public exploit CWE-502 Aug 14, 2025

N-able N-Central Insecure Deserialization Vulnerability

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

CVE-2025-8876 High · 8.8 KEV High · 54 CWE-78 Aug 14, 2025

N-able N-Central Command Injection Vulnerability

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.