N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)

N-able has urgently released the fourth hotfix in five weeks for its N-central remote monitoring and management (RMM) platform. The update fixes vulnerability CVE-2026-86218, rated with the maximum severity score (CVSS 10.0), which allows remote code execution without prior authentication. According to reports, the flaw is being actively exploited in targeted attacks against IT servers managed by Managed Service Providers (MSPs). Hotfix 4 is essential for all on-premises installations earlier than version 2026.3.1.14, including those updated with the previous hotfix just one day earlier. System administrators are urged to apply the patch immediately to prevent a complete compromise of the infrastructure.

Source: Vulnerability – InfoTech News