{"uuid": "b4299bc9-4fc5-4111-8f53-c33ef91cd5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86218", "type": "seen", "source": "https://bsky.app/profile/bigg-thecreator.bsky.social/post/3mvnprtvtqk2l", "content": "CISA added CVE-2026-86218 in N-able N-central to KEV on Sep 8 \u2014 a static code injection flaw allowing pre-auth RCE, in CISA's wording. Fix is 2026.3 Hotfix 4, Sep 5.\n\nwatchTowr, which reproduced it: compromise the RMM, reach every connected system downstream.", "creation_timestamp": "2026-09-16T18:00:02.112316Z"}