<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-04T21:59:44.117532+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3d2b7a63-9792-48a0-8f89-5c90ddbfa62e/export</id>
    <title>3d2b7a63-9792-48a0-8f89-5c90ddbfa62e</title>
    <updated>2026-08-04T21:59:44.147620+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "3d2b7a63-9792-48a0-8f89-5c90ddbfa62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/n-able-security-advisory-av26-769", "content": "", "creation_timestamp": "2026-08-04T20:15:06.798980Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3d2b7a63-9792-48a0-8f89-5c90ddbfa62e/export"/>
    <published>2026-08-04T20:15:06.798980+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/178be34b-a9d2-49fe-bbda-4b9c6a80598a/export</id>
    <title>178be34b-a9d2-49fe-bbda-4b9c6a80598a</title>
    <updated>2026-08-04T21:59:44.150671+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "178be34b-a9d2-49fe-bbda-4b9c6a80598a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3msbmaayzks2f", "content": "CISA \"added high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild\" thehackernews.com/2026/08/cisa... \"CVE-2026-18577 (CVSS score: 8.2) .. incomplete patching for CVE-2026-18556\" #cybersec tech", "creation_timestamp": "2026-08-04T18:09:04.651848Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/178be34b-a9d2-49fe-bbda-4b9c6a80598a/export"/>
    <published>2026-08-04T18:09:04.651848+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3d48f8cf-fe00-4b82-88a1-f87ecf5e4e0b/export</id>
    <title>3d48f8cf-fe00-4b82-88a1-f87ecf5e4e0b</title>
    <updated>2026-08-04T21:59:44.151978+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3d48f8cf-fe00-4b82-88a1-f87ecf5e4e0b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f341abd-5de9-4051-b7ad-7fce9c6482e0", "content": "", "creation_timestamp": "2026-08-04T18:00:01.638672Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3d48f8cf-fe00-4b82-88a1-f87ecf5e4e0b/export"/>
    <published>2026-08-04T18:00:01.638672+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/81b9b43d-2d63-4c1e-9767-93be28ef70cb/export</id>
    <title>81b9b43d-2d63-4c1e-9767-93be28ef70cb</title>
    <updated>2026-08-04T21:59:44.152067+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "81b9b43d-2d63-4c1e-9767-93be28ef70cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3msbjemnwuk26", "content": "\ud83d\uded1 CVE-2026-18556\nN-able N-central\nCVSS 8.2 / EPSS 0% / KEV \u2705\nTL;DR: Authentication bypass using an alternate path or channel vulnerability in N-able N-central a\u2026\nhttps://cvesentinel.com/report/CVE-2026-18556?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-04T17:17:44.537769Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/81b9b43d-2d63-4c1e-9767-93be28ef70cb/export"/>
    <published>2026-08-04T17:17:44.537769+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/855b33a5-af78-4ef7-8aff-14f9fc5edf5d/export</id>
    <title>855b33a5-af78-4ef7-8aff-14f9fc5edf5d</title>
    <updated>2026-08-04T21:59:44.152138+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "855b33a5-af78-4ef7-8aff-14f9fc5edf5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "exploited", "source": "Telegram/gkPs5Wjt5WHvC26RJXYmF2UWxeus-aPenNIWkoSGDD5BJA", "content": "", "creation_timestamp": "2026-08-04T17:00:04.652173Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/855b33a5-af78-4ef7-8aff-14f9fc5edf5d/export"/>
    <published>2026-08-04T17:00:04.652173+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/413ef613-b96c-47c3-8954-fd7d3e529854/export</id>
    <title>413ef613-b96c-47c3-8954-fd7d3e529854</title>
    <updated>2026-08-04T21:59:44.152205+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "413ef613-b96c-47c3-8954-fd7d3e529854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18556", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117037728063764089", "content": "CISA added this vulnerability to the catalogue yesterday, if you missed it: \nCVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-18577\nArctic Wolf: CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching https://arcticwolf.com/resources/blog/cve-2026-18556-cve-2026-18577/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-08-04T14:33:29.984240Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/413ef613-b96c-47c3-8954-fd7d3e529854/export"/>
    <published>2026-08-04T14:33:29.984240+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90981fc0-5ce8-45ca-a94e-aac92a4d1f2d/export</id>
    <title>90981fc0-5ce8-45ca-a94e-aac92a4d1f2d</title>
    <updated>2026-08-04T21:59:44.152270+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90981fc0-5ce8-45ca-a94e-aac92a4d1f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msba4q36uf2l", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-18556](https://uptime.n-able.com/)\nAuthentication bypass using an alternate path or cha...\nhttps://uptime.n-able.com/ #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-08-04T14:32:15.742277Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90981fc0-5ce8-45ca-a94e-aac92a4d1f2d/export"/>
    <published>2026-08-04T14:32:15.742277+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/36fb8eb7-e3c6-4cea-83cf-80f45bc00a29/export</id>
    <title>36fb8eb7-e3c6-4cea-83cf-80f45bc00a29</title>
    <updated>2026-08-04T21:59:44.152337+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "36fb8eb7-e3c6-4cea-83cf-80f45bc00a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msb47v56zl27", "content": "CVE-2026-18577 \u00b7 trending #8\n\nCurrently trending CVE - Hype Score: 3 - An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18577", "creation_timestamp": "2026-08-04T13:22:30.356116Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/36fb8eb7-e3c6-4cea-83cf-80f45bc00a29/export"/>
    <published>2026-08-04T13:22:30.356116+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bb29bd47-182f-427e-8cae-5008916474b0/export</id>
    <title>bb29bd47-182f-427e-8cae-5008916474b0</title>
    <updated>2026-08-04T21:59:44.152403+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bb29bd47-182f-427e-8cae-5008916474b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows", "creation_timestamp": "2026-08-04T10:00:43.530077Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bb29bd47-182f-427e-8cae-5008916474b0/export"/>
    <published>2026-08-04T10:00:43.530077+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/66d805fb-1570-41d5-8001-4ab7ee594709/export</id>
    <title>66d805fb-1570-41d5-8001-4ab7ee594709</title>
    <updated>2026-08-04T21:59:44.152471+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "66d805fb-1570-41d5-8001-4ab7ee594709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18556", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msaoprsbfc2t", "content": "\ud83e\udd16 CVE-2026-18577 (CVSS 8.2): authentication bypass in N-able N-central added to CISA KEV after active exploitation. Incomplete patch of CVE-2026-18556, gives admin access on RMM servers.\nhttps://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T09:20:47.377618Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/66d805fb-1570-41d5-8001-4ab7ee594709/export"/>
    <published>2026-08-04T09:20:47.377618+00:00</published>
  </entry>
</feed>
