Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Alerts

Active Exploitation of Vulnerability in N-Able N-Central

9 September 2026

Attackers are exploiting a critical vulnerability in N-Able N-Central remote management and monitoring tool to execute code remotely without authentication. Patch immediately.

Background

N-Able has released security updates to address a critical vulnerability (CVE-2026-86218) affecting N-Able N-Central. This vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 9.8 out of 10.

Impact

Successful exploitation of this vulnerability could allow an unauthenticated attacker to achieve remote code execution on affected N-Central systems.

Known Exploitation

This vulnerability is reportedly being actively exploited.

Affected Products

This vulnerability affects N-Central versions before 2026.3.1.14.

Recommendations

Users and administrators of affected products are advised to update to the latest version immediately.

References

https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution (opens in new tab)

https://nvd.nist.gov/vuln/detail/CVE-2026-86218 (opens in new tab)