CVE-2026-86206

MediumCVSS 6.9

Published: 05/09/2026(UTC)Translated: 06/09/2026(UTC)NVD NIST

Summary

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4.

Risk Assessment

An attacker can gain unauthorized access to internal APIs, potentially leading to system and data security compromise.

Recommendation

Update N-central to version 2026.3 HF3 or 2026.4.

Other vulnerabilities in N-central

See all

CVE-2026-86207High
An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs.
CVE-2026-18577HighActively exploited
An incomplete patch for CVE-2026-18556 allows authentication bypass and account takeover in N-central versions up to 2026.3.1.

Original NVD description (English source)

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4