{"schema":"vulnpedia.poc/1","cve":"CVE-2026-86218","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-09-08","ransomware":false},"epss":{"score":0.15385,"percentile":0.96759},"cvss":{"version":"4.0","score":10,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nable_ncentral_unauth_rce_cve_2026_86218.rb","executable":true,"sourceId":"exploit/linux/http/nable_ncentral_unauth_rce_cve_2026_86218","description":"N-able N-central Struts BeanUtils Unauthenticated RCE","verification":"catalogued","source":"metasploit","modified":"2026-09-18 14:55:32 +0000","origins":[{"source":"metasploit","sourceId":"exploit/linux/http/nable_ncentral_unauth_rce_cve_2026_86218","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nable_ncentral_unauth_rce_cve_2026_86218.rb"},{"source":"metasploit","sourceId":"exploit/linux/http/nable_ncentral_unauth_rce_cve_2026_86218","modified":"2026-09-18 14:55:32 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nable_ncentral_unauth_rce_cve_2026_86218.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/79a47772585f","executable":false,"sourceId":"79a47772585f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"79a47772585f","modified":"2026-09-06T00:00:00Z","url":"https://vulncheck.com/xdb/79a47772585f"}],"repositoryUrl":"https://github.com/super-meuw/CVE-2026-86218"}],"poc_candidates":[{"url":"https://github.com/HORKimhab/CVE-2026-86218","source":"poc-in-github","sourceId":"CVE-2026-86218","description":"CVE-2026-86218 - Draft or TODO - N-central is vulnerable to a pre-auth remote code execution","modified":"2026-09-17T01:38:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-86218","url":"https://github.com/HORKimhab/CVE-2026-86218"},{"source":"poc-in-github","sourceId":"CVE-2026-86218","modified":"2026-09-17T01:38:30Z","url":"https://github.com/HORKimhab/CVE-2026-86218"}],"tags":[]},{"url":"https://github.com/Udyz/CVE-2026-86218","source":"poc-in-github","sourceId":"CVE-2026-86218","description":"CVE-2026-86218 - N-able N-central Struts BeanUtils Unauthenticated RCE","modified":"2026-09-16T03:58:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-86218","url":"https://github.com/Udyz/CVE-2026-86218"},{"source":"poc-in-github","sourceId":"CVE-2026-86218","modified":"2026-09-16T03:58:37Z","url":"https://github.com/Udyz/CVE-2026-86218"}],"tags":[]},{"url":"https://github.com/super-meuw/CVE-2026-86218","source":"poc-in-github","sourceId":"CVE-2026-86218","description":"CVE-2026-86218 ","modified":"2026-09-24T20:26:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-86218","url":"https://github.com/super-meuw/CVE-2026-86218"},{"source":"poc-in-github","sourceId":"CVE-2026-86218","modified":"2026-09-24T20:26:17Z","url":"https://github.com/super-meuw/CVE-2026-86218"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-86218 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-86218/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-86218.yaml","template":"http/cves/2026/CVE-2026-86218.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-86218%22&type=repositories","executable":false}]}