N-able N-central pre-auth RCE (CVE-2026-86218) hits CVSS 10.0

A CVSS 10.0 pre-authentication RCE in N-able N-central headlines this digest, alongside two CVSS 9.8 account takeover CVEs.

2026-09-06 04:37 UTC

🔓 CVEs & KEV

CVE-2026-86218 — N-able N-central — CVSS 10.0 — pre-authentication remote code executionN-central is vulnerable to a pre-auth...
CVE-2026-75816 — shabti Frontend Admin by DynamiApps — CVSS 9.8 — Frontend Admin by DynamiApps through 3.29.12 - Unauthenticated Account Takeover vi...
CVE-2026-16310 — LearnDash MemberDash — CVSS 9.8 — MemberDash through 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Ob...

Start with the free Posture Self-Check to see where you stand against the current threat landscape.