CVE Catalog
CVE-2026-86207
HighCVSS 7.7Summary
An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs.
Risk Assessment
An attacker can gain unauthorized access to internal APIs, potentially leading to system integrity compromise and data leakage.
Recommendation
Update N-central to version 2026.3 HF 3 or later.
Other vulnerabilities in N-central
See all- CVE-2026-86206Medium
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4.
- CVE-2026-18577HighActively exploited
An incomplete patch for CVE-2026-18556 allows authentication bypass and account takeover in N-central versions up to 2026.3.1.
Original NVD description (English source)
An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs