MSP

Why SolarWinds Products are not affected by CVE-2026-18577, CVE-2026-86206, CVE-2026-86207, and CVE-2026-86218

This article explains why SolarWinds products are not affected by CVE-2026-18577, CVE-2026-86206, CVE-2026-86207, and CVE-2026-86218.

First published date

9/9/2026 6:01 PM

Last published date

9/9/2026 6:01 PM

Overview

In 2026, the National Institute of Standards and Technology (NIST) published a security bulletin about CVE-2026-18577, CVE-2026-86206, CVE-2026-86207, and CVE-2026-86218, vulnerabilities affecting the N-able N-central application.

Product section

MSP

Cause

CVE-2026-18577 is an authentication bypass vulnerability affecting the N-able N-central application up to version 2026.3.1.

CVE-2026-86206 is an unauthorized access vulnerability affecting the N-able N-central application running on versions earlier than 2026.3.1.13.

CVE-2026-86207 is another authentication bypass vulnerability affecting the N-able N-central application that leads to internal API access. Versions earlier than 2026.3.1.13 are affected.

CVE-2026-86218 is a pre-authentication remote code execution vulnerability affecting the N-able N-central application. Versions earlier than 2026.3.1.14 are affected.

Resolution

SolarWinds products do not use the N-able N-central application, and SolarWinds and N-able are separate, independently operated companies.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.