{"vulnerability": "CVE-2026-18577", "sightings": [{"uuid": "d9b0f2d3-ac66-4b6a-8cf2-250af6956cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msa6kf4tje2n", "content": "The latest update for #ArcticWolf includes \"CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate #Patching\" and \"You Can't Buy Your Way Out of Downtime\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-04T04:31:26.222428Z"}, {"uuid": "155097ce-1293-4318-8346-3145972307c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-18577: 30 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 30 interactions\nCVE-2026-51302: 4 interactions\nCVE-2026-45820: 3 interactions\n", "creation_timestamp": "2026-08-04T04:47:06.729334Z"}, {"uuid": "39da6e31-e5a9-4efe-8f80-4c950308860a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabbkue2x2e", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Aug 3)\n\nCVE-2026-18577 N-able N-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\uff08\u4ee3\u66ff\u30d1\u30b9\u307e\u305f\u306f\u30c1\u30e3\u30cd\u30eb\u306e\u4f7f\u7528\uff09\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-04T05:20:11.761215Z"}, {"uuid": "3e87f865-67b8-4154-9650-98a41b790eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-03T10:00:37.555686Z"}, {"uuid": "36d94597-b09d-4f15-9596-855b4b519b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-03T10:00:37.811149Z"}, {"uuid": "a5e9b151-2e74-4034-bbb5-409f0d388ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msajjuonjb2h", "content": "\ud83d\udcf0 N-able Peringatkan Celah Kritis N-central yang Sudah Dieksploitasi Hacker\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/04/cve-2026-18577-n-central-authentication-bypass/\n\n#authenticationBypass #cloudflared #cve-2026-18577 #cyberSecurity #msp #n-able #n-central #rmm", "creation_timestamp": "2026-08-04T07:48:00.142835Z"}, {"uuid": "d918310d-d4a5-404f-a08a-36e1aba74ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/thehackernews/9699", "content": "\u26a0\ufe0f N-central attacks are reaching managed endpoints.\n\nAttackers are exploiting CVE-2026-18577 to bypass authentication, gain admin access, and abuse Take Control for lateral movement. N-able confirms limited customer compromises, and CISA has added the flaw to KEV.\n\nWhat defenders need to check: https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T08:00:05.690439Z"}, {"uuid": "a3d66ba4-c8ad-4b52-8194-1e1684044b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msan273gdw2j", "content": "N-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304cCISA\u306eKEV\u306b\u8ffd\u52a0\u3002\u9867\u5ba2\u3078\u306e\u5f71\u97ff\u304c\u78ba\u8a8d\u3055\u308c\u3001\u4e0d\u6b63\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-08-04T08:50:52.065276Z"}, {"uuid": "c8d6e3c0-d23a-4e4b-9ca9-91a835a43307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msaoprsbfc2t", "content": "\ud83e\udd16 CVE-2026-18577 (CVSS 8.2): authentication bypass in N-able N-central added to CISA KEV after active exploitation. Incomplete patch of CVE-2026-18556, gives admin access on RMM servers.\nhttps://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T09:20:47.321110Z"}, {"uuid": "db3f70cf-bd53-487e-857e-53642f12e55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msaprjy5dr2t", "content": "The patch was supposed to fix the hole. It didn't.\n\nCVE-2026-18577.\n\nhttps://www.yazoul.net/malware/mirai-2026-08/reports/2026-08-02/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-04T09:39:39.919627Z"}, {"uuid": "77befedc-a7a7-4acf-8779-14ca13ce913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3ms6idtbdml2u", "content": "N-able N-central, the console MSPs use to run thousands of customer machines, has an actively exploited auth bypass (CVE-2026-18577).\n\nThe first patch was bypassable.\n\nFix: upgrade to 2026.3.1.7, then hunt the managed endpoints.", "creation_timestamp": "2026-08-03T12:21:24.729766Z"}, {"uuid": "12ea37f7-1776-4ce6-b874-478d99f93bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3ms6jmnkjub2m", "content": "CVE-2026-18577 enables authentication bypass in N-central, letting attackers take over accounts, gain admin access, and persist via Cloudflare tunnels.\n", "creation_timestamp": "2026-08-03T12:44:14.756237Z"}, {"uuid": "060b7ecd-c3a5-4caf-828a-403e55dde56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbu2xq32m", "content": "CVE-2026-18577: Attackers Exploit N-able's N-central to Gain Admin Access #CVE2026 #CyberSecurity #Ncentral", "creation_timestamp": "2026-08-03T13:16:33.922885Z"}, {"uuid": "d6475caf-d2cb-416f-94f0-d18aca00e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbxh43e22", "content": "CVE-2026-18577: N-able's Patch Raises Questions on Vulnerability Management #CVE2026 #Nable #PatchManagement", "creation_timestamp": "2026-08-03T13:16:35.319142Z"}, {"uuid": "ff045507-482f-426b-a9cb-298c04355be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-03T13:23:47.987657Z"}, {"uuid": "08069327-6b13-48b6-86bd-3af4d0307053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3ms6q5hrmdc26", "content": "Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/03/c...\n\n#vulnerability #remotemanagement #cybersecuritynews", "creation_timestamp": "2026-08-03T14:41:03.610427Z"}, {"uuid": "3a69f60f-8497-44f8-8da5-95cf34d802f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3ms6q7tmtvq2p", "content": "N\u2011able parchea CVE-2026-18577 tras acceso a consolas N-central\n\nN\u2011able parche\u00f3 CVE-2026-18577 tras explotaci\u00f3n que permiti\u00f3 a atacantes tomar consolas\u2026\n\nhttps://mentehackers.com/n-able-cve-2026-18577-n-central-exploit-7378d93c\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-03T14:42:20.920876Z"}, {"uuid": "28715fdf-fa72-4f75-82dc-ab678ad920ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6qev4evs2w", "content": "\u653b\u6483\u8005\u304cN-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u4fb5\u5165\n\n\u653b\u6483\u8005\u306f\u3001\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc(MSP)\u306b\u5e83\u304f\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u30ea\u30e2\u30fc\u30c8\u76e3\u8996\u30fb\u7ba1\u7406(RMM)\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cN-able N-central\u300d\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u3001\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5f97\u3066\u3044\u307e\u3059\u3002 \u8106\u5f31\u6027\u767a\u898b\u306e\u7d4c\u7def \u300c2026\u5e747\u670831\u65e5\u3001...", "creation_timestamp": "2026-08-03T14:45:09.746706Z"}, {"uuid": "6ef571e9-ac19-4b35-99eb-3565fca6fec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3ms6qjy2efs24", "content": "Cybersecurity is facing a systemic trust crisis. \n\nFrom the 'god-mode' vulnerability in N-able's N-central (CVE-2026-18577) that puts MSPs and their entire customer base at risk, to the Octagon spyware masquerading as government apps on Android, attackers are exploiting every possible trust vecto...", "creation_timestamp": "2026-08-03T14:48:01.622324Z"}, {"uuid": "4dde779e-97c8-4eda-9caa-07841ac810c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-03T15:00:05.370868Z"}, {"uuid": "7c63f857-0f90-4b5b-bea7-5d383edbff55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3ms6rwxvxbz2u", "content": "N-able disclosed a critical vulnerability (CVE-2026-18577) in its N-central RMM platform, allowing unauthenticated attackers to gain full administrative access. This affects all supported versions and is actively exploited. A hotfix (2026.3.1.7) was released on August 2, urging immediate upgrades.", "creation_timestamp": "2026-08-03T15:13:10.698498Z"}, {"uuid": "5fd4f0a3-9592-4ed4-b0af-9daec5157c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vyizska2s", "content": "CVE-2026-18577 is being exploited in the wild for N-central account takeover. An incomplete patch let attackers gain admin access. Update to 2026.3.1.7.\n\n#Nable #Ncentral #CVE202618577 #AccountTakeover #RMM #CyberSecurity", "creation_timestamp": "2026-08-03T16:25:51.417101Z"}, {"uuid": "678cf9e7-68e7-451e-9030-bab9b2042e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3ms6xybpjh52q", "content": "N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers.", "creation_timestamp": "2026-08-03T17:01:16.924281Z"}, {"uuid": "eea101ac-04c4-452f-8694-ca74824d8b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6ydvads62b", "content": "N-able\u3001\u5b9f\u969b\u306b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bN-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3092\u8b66\u544a\n\nN-able\u306f\u3001\u30db\u30b9\u30c8\u578b\u3068\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3059\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304c\u3001\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u9867\u5ba2\u306b\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u540c\u793e\u306f\u65e5\u66dc\u65e5\u3001\u3053\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u30db\u30c3\u30c8\u30d5\u30a3\u30c3\u30af\u30b92026.3.1.7\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f2026.3\u3088\u308a\u524d\u306e\u3059\u3079...", "creation_timestamp": "2026-08-03T17:07:46.104816Z"}, {"uuid": "7c20d7c5-ed09-49a2-b7ce-4e80d89568fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms6zmsjwil23", "content": "\ud83d\udea8 Breaking: N-able warns of N-central auth bypass flaw exploited in attacks\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\n\ud83d\udd17 https://hnow.live/a/c2a1beae", "creation_timestamp": "2026-08-03T17:30:39.000159Z"}, {"uuid": "33ee3693-f720-4824-8f14-78bbc0a7c1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032836649829655", "content": "It is possible to see elevated activities targeting N-able N-central (CVE-2026-18577) https://vuldb.com/vuln/385422/cti", "creation_timestamp": "2026-08-03T17:49:28.231077Z"}, {"uuid": "be22de9a-9426-4182-aee7-c02c20c58b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-03T18:00:04.177241Z"}, {"uuid": "66946c1c-2393-401e-9063-4e230072440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T18:00:05.338172Z"}, {"uuid": "26102602-445a-486a-84c9-0eb2308f77e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3ms77q5isht2b", "content": "\ud83d\uded1 CVE-2026-18577\nN-able N-central\nCVSS 8.2 / EPSS 1% / KEV: No\nTL;DR: An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeov\u2026\nhttps://cvesentinel.com/report/CVE-2026-18577?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-03T19:19:53.428512Z"}, {"uuid": "cd9dd0e8-0035-489f-95ef-5f537114a1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7bjrt6mo24", "content": "N-central\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\uff08CVE-2026-18577\uff09\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u5229\u7528\u3057\u3001\u30db\u30b9\u30c8\u578b\u30fb\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3002", "creation_timestamp": "2026-08-03T19:52:07.667067Z"}, {"uuid": "0e65b8cd-a17f-4ae1-86ff-ddcc178391b2", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a013613c-01b8-42e9-ab38-5ae39e63141e", "content": "", "creation_timestamp": "2026-08-03T20:00:02.408785Z"}, {"uuid": "7adf1075-6b45-410c-ba8d-cbe8daf721cd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ce14e1c-ac05-49ca-81bc-1978117d0c8b", "content": "", "creation_timestamp": "2026-08-03T20:00:22.358636Z"}, {"uuid": "1a2fcc21-bac5-42cb-a639-860f1acfda34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/morningnode.bsky.social/post/3ms7cgrwivy2u", "content": "N-able on-prem N-central customers need to manually install hotfix 2026.3.1.7 after active exploitation of CVE-2026-18577. Verify patching and review the published indicators of\u2026\nhttps://themorningnode.com/news/aGIkbGyFHEEW7sRwnxaV9?utm_source=bluesky&utm_medium=social&utm_campaign=the-morning-node", "creation_timestamp": "2026-08-03T20:08:20.530350Z"}, {"uuid": "ebeeef60-4fbd-4eba-a75b-6b7c39de8632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms7dovmmkt2u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-18577 N-able N-central\u2026\n\n\ud83d\udd17 https://hnow.live/a/dd8d41da", "creation_timestamp": "2026-08-03T20:30:47.312509Z"}, {"uuid": "5e8753ec-34a1-4560-bc30-99a31e6e523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3ms7euvqoup2d", "content": "\ud83e\udd16 CVE-2026-18577: auth bypass in N-able N-central actively exploited. Incomplete fix for CVE-2026-18576; both allow admin takeover. Hotfix 2026.3.1.7 out, on-prem must patch.\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T20:52:01.979837Z"}, {"uuid": "2100b513-a924-4a6d-a1ce-c72c41071575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3ms7fdni2t32t", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)\n\n\u26a0\ufe0f CVE-2026-18577 - N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-03T21:00:16.454458Z"}, {"uuid": "5c7f9c33-fb3d-443a-8f00-94b62c3f8335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/isuvo.bsky.social/post/3ms7ioolvm523", "content": "Dissecting the CVE-2026-18577 patch bypass in N\n\nhttps://ixuvo.com/blog/unauthenticated-god-mode-bypassing-patch-n-central-rmm-cve-2026-18577", "creation_timestamp": "2026-08-03T22:00:08.310413Z"}, {"uuid": "2b71a6d7-caac-4df0-8195-831005aec999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms7ipsttjk2m", "content": "Attackers Exploit N-able Patch Bypass Flaw on RMM Servers\nOver the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.\n\n\ud83d\udd17 https://hnow.live/a/c6000199", "creation_timestamp": "2026-08-03T22:00:46.385738Z"}, {"uuid": "3509e5c5-1a12-4ef4-9729-44b2c04dc667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3ms7j3nxn4c24", "content": "ALERT: Active exploitation verified for CVE-2026-18577 in N-able N-central. Unauthenticated attackers can execute account takeovers via alternate path manipulation. Access our complete threat breakdown, SPL/KQL detection logic, and hardening guidance here:\u2026", "creation_timestamp": "2026-08-03T22:07:24.302331Z"}, {"uuid": "6b863ecf-4cc1-4ad3-9c24-05f0d278984b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3ms7n26a2um26", "content": "URGENT C-SUITE BRIEF: Active exploitation verified on CISA KEV for CVE-2026-18577 (N-able N-central). Executive leadership must oversee immediate patch deployment, supply chain auditing, and trust model revalidation to safeguard organizational assets. Full strategic analysis:\u2026", "creation_timestamp": "2026-08-03T23:18:09.094450Z"}, {"uuid": "100b81e8-73b2-4881-b1ab-cd6d7cbfa58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-04T00:00:29.274806Z"}, {"uuid": "f352e4cb-f6cc-4b14-8d73-7de1b5ebba56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-04T00:00:39.750998Z"}, {"uuid": "9cbdc771-e8e5-4ee6-9d13-b71fe3a9102c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-04T00:00:35.437785Z"}, {"uuid": "002cc851-1f02-4090-a838-ae7a85d3d3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3ms7rwadug724", "content": "N-able says CVE-2026-18577 is being actively exploited in N-central hosted and on-prem servers before 2026.3. Hotfix 2026.3.1.7 is available for the auth bypass flaw. #Ncentral #CVE202618577 #Nable", "creation_timestamp": "2026-08-04T00:45:25.951432Z"}, {"uuid": "bb0d6107-d32c-46a2-bdb0-8b0d34d2f7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-04T01:00:12.309643Z"}, {"uuid": "be3b9d1b-f02a-46e8-bf89-2e2172aa9f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-04T01:00:33.828982Z"}, {"uuid": "816d742e-8986-4b26-9ee5-1e57b75d732a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-04T01:00:33.526866Z"}, {"uuid": "7913f722-a9e5-4486-94e0-b67a50cd02b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/attackers-exploit-n-able-patch-bypass-flaw", "content": "Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.", "creation_timestamp": "2026-08-04T01:00:35.315862Z"}]}