CVE-2026-86206
NoneCVSS
—
EPSS
1.1%
Published
Sep 5, 2026
CISA due date
—
The record
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-75979 A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. CWE-791
- CVE-2026-19929 A vulnerability was identified in OpenBoxes up to 0.9.6. CWE-791
- CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE… CWE-791
- CVE-2026-48208 An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition… CWE-791
- CVE-2026-9498 A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. CWE-791
- CVE-2026-8740 A flaw has been found in Sanluan PublicCMS 5.202506.d. CWE-791
- CVE-2026-44232 DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF… CWE-791
- GHSA-8p33-q827-ghj5 dssrf: every IPv6 category bypasses is_url_safe CWE-791