N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)

N-able has issued an urgent security update for its N-central remote monitoring and management platform, addressing a critical vulnerability identified as CVE-2026-86218. This flaw allows for pre-authenticated remote code execution on the N-central server, posing a significant risk to both hosted and on-premises deployments. While the vendor's initial public advisory did not confirm active exploitation, subsequent customer notifications explicitly stated that the vulnerability was observed being exploited in the wild, characterizing it as a zero-day issue. Affected organizations are advised to upgrade immediately to N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to mitigate the threat.