{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:29.965Z","products":["nable"],"actNowTotal":1,"results":[{"query":"nable","matched":1,"actNow":1,"events":[{"id":"kev-2026-09-08-n-able-n-central","url":"https://securitythreatpulse.com/events/kev-2026-09-08-n-able-n-central","title":"N-able N-central: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 62 days old, so current versions are being attacked. Ready-made attack tools are public. The severity score is critical (10.0).","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-86218"],"vendor":"N-able","product":"N-central","affectedProducts":[{"vendorKey":"nable","productKey":"ncentral","vendor":"N-able","product":"N-central","slug":"nable/ncentral","kind":"direct","evidence":["kev"]}],"category":{"id":"remote-it","label":"Remote support or IT management","why":"It controls many computers at once, so one break-in can reach all of them.","doThis":"Patch it today, or ask your IT provider if they run it for you."},"summary":"N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.","cvss":10,"epss":0.15385,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-09-08","kevDueDate":"2026-09-11","firstSeenAt":"2026-09-08T00:00:00.000Z","updatedAt":"2026-11-07T02:22:40.909Z","newestEvidenceAt":"2026-11-04T10:39:36.596Z"}]}]}