Critical RMM Vulnerabilities Exploited: MSPs Urged to Test Security Controls

Recent reports highlight critical vulnerabilities in RMM and on-premises SharePoint — including an actively exploited pre-auth RCE in N-able N-central (CVE-2026-86218) and SharePoint zero-days (CVE-2025-53770/53771). CISA warns that ransomware actors are leveraging legitimate RMM tools to infiltrate customer networks; MSPs are urged to test and enforce eight key security controls (endpoint discovery/inventory, risk-based patching, access controls, etc.) to reduce downstream compromise.