Rapid7 discloses two N-able N-central authentication bypass vulnerabilities

Rapid7 has disclosed two vulnerabilities in N-able N-central, an RMM platform for managed service providers. Tracked as CVE-2026-86206 and CVE-2026-86207, the flaws can be chained to let a remote unauthenticated attacker bypass authentication and create an attacker-controlled system administrator account.

The issues were found by Rapid7 researcher Stephen Fewer and have been patched in N-central 2026.3 Hotfix 3. Rapid7 says customers running on-premise versions should apply the update urgently, while hosted customers need no action.