N-able Status

Build Number: 2026.3.1.13   

Last Updated: Sept 5^th 2026 

Security Update 

This hotfix includes security fixes for CVE-2026-86206 and CVE-2026-86207 which are high-CVSS-rated vulnerabilities that could allow an unauthorized party to bypass authentication controls and gain full access to the N-central platform.  

The vulnerabilities were responsibly disclosed by a third party through our security disclosure program. At this time, we have no confirmations that these vulnerabilities have been exploited in production environments, but unpatched systems remain at risk. 

Customers running on-premises N-central deployments should upgrade to N-central 2026.3 HF3 immediately to protect their environment. 

Download links:

N-central

N-central CMMC Download (For CMMC Subscribed Accounts) 

Additional Information 

This release supersedes N-central 2026.3 Hotfix 2 (build 2026.3.1.10). For details about the 2026.3 Hotfix 2 release, see 2026.3 HF2 Release Notes. To learn what’s included in the 2026.3 release, see N-central 2026.3 Release Notes.

Hosted N-central – No action required 

If you are on an N-central hosted instance (NCOD), patches have already been applied to your environment. You do not need to do anything at this time. 

N-central (self-hosted) – How do I upgrade to the hotfix? 

Download and upgrade to 2026.3.1.13 using the instructions provided below and, on the N-able support portal. If you need assistance with the upgrade process, please contact our support team at https://me.n-able.com/s/ 

Upgrade Documentation: https://documentation.n-able.com/N-central/userguide/Content/ReleaseDocs/Install_Config/InstallConfig_Upgrade.htm 

Upgrading from legacy versions: https://documentation.n-able.com/N-central/userguide/Content/ReleaseDocs/Release_Notes/upgrade_path.htm 

Supported Upgrade Paths 

• Upgrade directly to 2026.3.1.13 from:  

• 2025.4 

• 2026.1 

• 2026.2 

• 2026.3 

• 2026.3.1 (Hotfix 1) 

• 2026.3.1 (Hotfix 2) 

If you are on an older version, we recommend going to any of the builds above, then upgrading to this hotfix version ASAP. If you are unsure of what to do, you can contact support directly. 

Do I need to update my agents too? 

While the hotfix itself does not require agents to be upgraded to protect you from CVE-2026-86206 and CVE-2026-86207. As a best practice we always recommend that you upgrade agents to the latest available version. 

For More Information: 

Support: https://me.n-able.com/s/ 

Uptime Page: https://uptime.n-able.com/ 

We previously retired the legacy N-central Mobile app following the identification of security vulnerabilities. Rather than reinstating the existing application, we made the decision to build a new N-central Mobile app from the ground up on a modern, more secure foundation, available for both iOS and Android.

Important: The new N-central Mobile app requires N-central 2026.4 or later. The app cannot be used to connect to N-central servers running earlier versions.

After upgrading to N-central 2026.4, users can take advantage of the new N-central Mobile app on iOS and Android, including N-able Login (SSO) and Take Control functionality.

Here are the links to the applications:

Android: N-central Mobile – Apps on Google Play

iOS: https://apps.apple.com/gb/app/n-central-mobile/id421890006

For this first release, we have intentionally focused the experience on Take Control, one of the most frequently used capabilities in the previous mobile app. This enables technicians to quickly access and remotely support managed devices while on the go, while giving us a strong foundation on which to expand the mobile experience.

With the new N-central Mobile app, you can:

• Select a customer or site and quickly navigate to its devices.

• Search and filter the device list to find the device you need.

• View key device details at a glance.

• Launch Take Control remote sessions directly from your mobile device.
• Use the app on both iOS and Android devices.
• Benefit from a modernized foundation designed for improved security, performance, and stability.

What’s Next

This release is the starting point for the new N-central Mobile experience. We are beginning with Take Control and the supporting workflows needed to find and connect to devices quickly.

Over time, we plan to incrementally introduce additional mobile capabilities, informed by partner needs and usage, while continuing to build on the app’s modern foundation.

Sign in with your existing N-central account to get started:

• Users can authenticate using N-able Login, including MFA and N-able Login. The Mobile App also supports N-able Login with Entra ID. Note: The app differentiates between local login and SSO login for a streamlined login process.

How Login Works:

If Local Login:

• The app prompts for a password and MFA, then grants access to the product.

If SSO Login:

• Base N-able Login: The user is forwarded to the N-able Login flow, where they enter their username, password, and MFA (if applicable).
• N-able Login with a Third-Party IDP: The user is redirected to the third-party provider, follows the external authentication process, and is granted access.