CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

Overview While conducting research into a recent N-able N-central authentication bypass vulnerability CVE-2026-18577, Rapid7 Labs discovered two new vulnerabilities affecting the latest version of N-central. When chained together, these two vulnerabilities allow a remote unauthenticated attacker ...

PT-2016-6157

Name of the Vulnerable Software and Affected Versions NetCommons versions 2.4.2.1 and earlier Description The issue allows remote authenticated secretariat users to gain privileges by creating a SYSTEM ADMIN account. Recommendations For NetCommons versions 2.4.2.1 and earlier, consider restrictin...