# N-Able vulnerabilities > N-Able has 12 published vulnerabilities across 4 products in our catalogue. 5 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is N-Central, with 9. If you run N-Able software, patch the exploited flaws first. Canonical page: https://www.edgeprotect.io/vendors/n-able ## At a glance - **Published vulnerabilities:** 12 - **Known to be exploited:** 5 - **Products:** 4 - **Versions:** 17 - **Most recently added to the known-exploited list:** [CVE-2026-86218](https://www.edgeprotect.io/what-is/cve-2026-86218), 8 September 2026. We keep watching the list. ## Which N-Able products have the most vulnerabilities? - [N-Central](https://www.edgeprotect.io/product/n-able/n-central): 9 published vulnerabilities, 14 versions - [Automation Manager](https://www.edgeprotect.io/product/n-able/automation_manager): 1 published vulnerability, 0 versions - [Passportal](https://www.edgeprotect.io/product/n-able/passportal): 1 published vulnerability, 1 version - [Take Control](https://www.edgeprotect.io/product/n-able/take_control): 1 published vulnerability, 2 versions Each product page lists its own known-exploited flaws. ## Which N-Able vulnerabilities are being exploited? 5 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-86218](https://www.edgeprotect.io/what-is/cve-2026-86218): N-able N-central Static Code Injection Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 15%, known exploited since 8 September 2026. - [CVE-2026-18556](https://www.edgeprotect.io/what-is/cve-2026-18556): N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability. High, CVSS 8.2, chance of use in 30 days 44%, known exploited since 4 August 2026. - [CVE-2026-18577](https://www.edgeprotect.io/what-is/cve-2026-18577): N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability. High, CVSS 8.2, chance of use in 30 days 15%, known exploited since 3 August 2026. - [CVE-2025-8875](https://www.edgeprotect.io/what-is/cve-2025-8875): N-able N-Central Insecure Deserialization Vulnerability. Critical, CVSS 9.4, chance of use in 30 days 2.3%, known exploited since 13 August 2025. - [CVE-2025-8876](https://www.edgeprotect.io/what-is/cve-2025-8876): N-able N-Central Command Injection Vulnerability. Critical, CVSS 9.4, chance of use in 30 days 4.1%, known exploited since 13 August 2025. ## Which N-Able flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2026-18556](https://www.edgeprotect.io/what-is/cve-2026-18556): 44%, High (CVSS 8.2), known exploited - [CVE-2025-11700](https://www.edgeprotect.io/what-is/cve-2025-11700): 32%, High (CVSS 8.4) - [CVE-2026-86218](https://www.edgeprotect.io/what-is/cve-2026-86218): 15%, Critical (CVSS 10.0), known exploited - [CVE-2026-18577](https://www.edgeprotect.io/what-is/cve-2026-18577): 15%, High (CVSS 8.2), known exploited - [CVE-2025-8876](https://www.edgeprotect.io/what-is/cve-2025-8876): 4.1%, Critical (CVSS 9.4), known exploited - [CVE-2025-8875](https://www.edgeprotect.io/what-is/cve-2025-8875): 2.3%, Critical (CVSS 9.4), known exploited - [CVE-2024-28200](https://www.edgeprotect.io/what-is/cve-2024-28200): 1.9%, Critical (CVSS 9.1) - [CVE-2025-11367](https://www.edgeprotect.io/what-is/cve-2025-11367): 0.6%, Critical (CVSS 10.0) - [CVE-2025-11366](https://www.edgeprotect.io/what-is/cve-2025-11366): 0.6%, Critical (CVSS 9.4) - [CVE-2023-47132](https://www.edgeprotect.io/what-is/cve-2023-47132): 0.6%, Critical (CVSS 9.8) ## All N-Able products we track 3 products with at least one tracked version, most vulnerabilities first: - [N-Central](https://www.edgeprotect.io/product/n-able/n-central): 9 vulnerabilities, 14 versions - [Passportal](https://www.edgeprotect.io/product/n-able/passportal): 1 vulnerability, 1 version - [Take Control](https://www.edgeprotect.io/product/n-able/take_control): 1 vulnerability, 2 versions ## Questions ### How many vulnerabilities does N-Able have? Our catalogue lists 12 published vulnerabilities across 4 products and 17 versions from N-Able. The most recent N-Able flaw added to the known-exploited list is CVE-2026-86218, on 8 September 2026. ### Which N-Able vulnerabilities are being exploited? 5 N-Able vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-86218, CVE-2026-18556 and CVE-2026-18577. The full list is on this page. ### Which N-Able product has the most vulnerabilities? N-Central, with 9 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new N-Able vulnerabilities? Create a EdgeProtect account and track the N-Able products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running N-Able? EdgeProtect keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.edgeprotect.io/register Book a demo: https://www.edgeprotect.io/contact