{"vulnerability": "cve-2026-18577", "sightings": [{"uuid": "d9b0f2d3-ac66-4b6a-8cf2-250af6956cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msa6kf4tje2n", "content": "The latest update for #ArcticWolf includes \"CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate #Patching\" and \"You Can't Buy Your Way Out of Downtime\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-04T04:31:26.222428Z"}, {"uuid": "155097ce-1293-4318-8346-3145972307c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-18577: 30 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 30 interactions\nCVE-2026-51302: 4 interactions\nCVE-2026-45820: 3 interactions\n", "creation_timestamp": "2026-08-04T04:47:06.729334Z"}, {"uuid": "16465637-1c1c-4a52-9409-c79e4d9e152d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117037728063764089", "content": "CISA added this vulnerability to the catalogue yesterday, if you missed it: \nCVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-18577\nArctic Wolf: CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching https://arcticwolf.com/resources/blog/cve-2026-18556-cve-2026-18577/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-08-04T14:33:29.898893Z"}, {"uuid": "39da6e31-e5a9-4efe-8f80-4c950308860a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabbkue2x2e", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Aug 3)\n\nCVE-2026-18577 N-able N-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\uff08\u4ee3\u66ff\u30d1\u30b9\u307e\u305f\u306f\u30c1\u30e3\u30cd\u30eb\u306e\u4f7f\u7528\uff09\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-04T05:20:11.761215Z"}, {"uuid": "affc7169-f8ed-4fcd-89d7-a4fdfd82f6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msbe4u6rjk2a", "content": "Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)\n\nAttackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution widely used by managed service providers, to\u2026\n#hackernews #news", "creation_timestamp": "2026-08-04T15:44:00.566991Z"}, {"uuid": "9338f163-4983-4837-a4cc-fc09b47a95b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24", "content": "~Cybergcca~\nSix advisories covering critical vulnerabilities in N-able, IBM, Dell, WebPros, Tenable, and Check Point products, including an actively exploited N-able flaw.\n-\nIOCs: CVE-2026-18577, CVE-2026-58047, CVE-2026-18574\n-\n...", "creation_timestamp": "2026-08-04T16:07:10.632775Z"}, {"uuid": "3e87f865-67b8-4154-9650-98a41b790eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-03T10:00:37.555686Z"}, {"uuid": "36d94597-b09d-4f15-9596-855b4b519b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-03T10:00:37.811149Z"}, {"uuid": "ea1cfcda-c0b7-4277-8da7-878a1a826bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/n-able-security-advisory-av26-769", "content": "", "creation_timestamp": "2026-08-04T16:15:12.523339Z"}, {"uuid": "a5e9b151-2e74-4034-bbb5-409f0d388ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msajjuonjb2h", "content": "\ud83d\udcf0 N-able Peringatkan Celah Kritis N-central yang Sudah Dieksploitasi Hacker\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/04/cve-2026-18577-n-central-authentication-bypass/\n\n#authenticationBypass #cloudflared #cve-2026-18577 #cyberSecurity #msp #n-able #n-central #rmm", "creation_timestamp": "2026-08-04T07:48:00.142835Z"}, {"uuid": "d918310d-d4a5-404f-a08a-36e1aba74ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/thehackernews/9699", "content": "\u26a0\ufe0f N-central attacks are reaching managed endpoints.\n\nAttackers are exploiting CVE-2026-18577 to bypass authentication, gain admin access, and abuse Take Control for lateral movement. N-able confirms limited customer compromises, and CISA has added the flaw to KEV.\n\nWhat defenders need to check: https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T08:00:05.690439Z"}, {"uuid": "2288249b-7d72-4343-950e-735be530ee9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.605265Z"}, {"uuid": "48636abc-9622-40e8-a7ed-09f911777825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "Telegram/gkPs5Wjt5WHvC26RJXYmF2UWxeus-aPenNIWkoSGDD5BJA", "content": "", "creation_timestamp": "2026-08-04T17:00:04.677486Z"}, {"uuid": "a3d66ba4-c8ad-4b52-8194-1e1684044b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msan273gdw2j", "content": "N-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304cCISA\u306eKEV\u306b\u8ffd\u52a0\u3002\u9867\u5ba2\u3078\u306e\u5f71\u97ff\u304c\u78ba\u8a8d\u3055\u308c\u3001\u4e0d\u6b63\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-08-04T08:50:52.065276Z"}, {"uuid": "f76b342a-7e91-47e3-9873-6214e7add5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3msbmaayzks2f", "content": "CISA \"added high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild\" thehackernews.com/2026/08/cisa... \"CVE-2026-18577 (CVSS score: 8.2) .. incomplete patching for CVE-2026-18556\" #cybersec tech", "creation_timestamp": "2026-08-04T18:09:04.590625Z"}, {"uuid": "c8d6e3c0-d23a-4e4b-9ca9-91a835a43307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msaoprsbfc2t", "content": "\ud83e\udd16 CVE-2026-18577 (CVSS 8.2): authentication bypass in N-able N-central added to CISA KEV after active exploitation. Incomplete patch of CVE-2026-18556, gives admin access on RMM servers.\nhttps://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T09:20:47.321110Z"}, {"uuid": "db3f70cf-bd53-487e-857e-53642f12e55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msaprjy5dr2t", "content": "The patch was supposed to fix the hole. It didn't.\n\nCVE-2026-18577.\n\nhttps://www.yazoul.net/malware/mirai-2026-08/reports/2026-08-02/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-04T09:39:39.919627Z"}, {"uuid": "87a329a4-a36a-4f24-88aa-a56bdaa22e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msbre6kpu22a", "content": "N-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n#hackernews #news", "creation_timestamp": "2026-08-04T19:40:39.458901Z"}, {"uuid": "405ae243-57b7-4673-8797-d6fd4830afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows", "creation_timestamp": "2026-08-04T10:00:43.486981Z"}, {"uuid": "26d89255-a5f2-49fd-aeb1-11bcaa8fc1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.acn.gov.it/portale/w/n-able-rilevato-sfruttamento-attivo-in-rete-della-cve-2026-18577", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-18577 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in N-able N-central, piattaforma avanzata di Remote Monitoring and Management (RMM) progettata con l\u2019obiettivo di gestire, proteggere e automatizzare infrastrutture IT complesse su larga scala. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-04T10:00:43.846533Z"}, {"uuid": "77befedc-a7a7-4acf-8779-14ca13ce913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3ms6idtbdml2u", "content": "N-able N-central, the console MSPs use to run thousands of customer machines, has an actively exploited auth bypass (CVE-2026-18577).\n\nThe first patch was bypassable.\n\nFix: upgrade to 2026.3.1.7, then hunt the managed endpoints.", "creation_timestamp": "2026-08-03T12:21:24.729766Z"}, {"uuid": "12ea37f7-1776-4ce6-b874-478d99f93bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3ms6jmnkjub2m", "content": "CVE-2026-18577 enables authentication bypass in N-central, letting attackers take over accounts, gain admin access, and persist via Cloudflare tunnels.\n", "creation_timestamp": "2026-08-03T12:44:14.756237Z"}, {"uuid": "060b7ecd-c3a5-4caf-828a-403e55dde56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbu2xq32m", "content": "CVE-2026-18577: Attackers Exploit N-able's N-central to Gain Admin Access #CVE2026 #CyberSecurity #Ncentral", "creation_timestamp": "2026-08-03T13:16:33.922885Z"}, {"uuid": "d6475caf-d2cb-416f-94f0-d18aca00e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbxh43e22", "content": "CVE-2026-18577: N-able's Patch Raises Questions on Vulnerability Management #CVE2026 #Nable #PatchManagement", "creation_timestamp": "2026-08-03T13:16:35.319142Z"}, {"uuid": "ff045507-482f-426b-a9cb-298c04355be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-03T13:23:47.987657Z"}, {"uuid": "52f92c17-58d8-4f58-9cbf-bdc9a7fa4b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "published-proof-of-concept", "source": "Telegram/GMbxxZ0cu7FgkFldz0u81QH5ac9fGj43iJQuczkDRXYsUrg", "content": "", "creation_timestamp": "2026-08-04T12:00:09.171023Z"}, {"uuid": "a235e5fa-f7f5-41e9-922e-e9677d46a222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msaxrzh2gp23", "content": "832,000 reasons to stop negotiating with ransomware crews.\n\nHouston City College.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-18577-n-central-auth-bypass-exploited-in-the-wild/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-04T12:03:06.433822Z"}, {"uuid": "08069327-6b13-48b6-86bd-3af4d0307053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3ms6q5hrmdc26", "content": "Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/03/c...\n\n#vulnerability #remotemanagement #cybersecuritynews", "creation_timestamp": "2026-08-03T14:41:03.610427Z"}, {"uuid": "3a69f60f-8497-44f8-8da5-95cf34d802f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3ms6q7tmtvq2p", "content": "N\u2011able parchea CVE-2026-18577 tras acceso a consolas N-central\n\nN\u2011able parche\u00f3 CVE-2026-18577 tras explotaci\u00f3n que permiti\u00f3 a atacantes tomar consolas\u2026\n\nhttps://mentehackers.com/n-able-cve-2026-18577-n-central-exploit-7378d93c\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-03T14:42:20.920876Z"}, {"uuid": "28715fdf-fa72-4f75-82dc-ab678ad920ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6qev4evs2w", "content": "\u653b\u6483\u8005\u304cN-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u4fb5\u5165\n\n\u653b\u6483\u8005\u306f\u3001\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc(MSP)\u306b\u5e83\u304f\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u30ea\u30e2\u30fc\u30c8\u76e3\u8996\u30fb\u7ba1\u7406(RMM)\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cN-able N-central\u300d\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u3001\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5f97\u3066\u3044\u307e\u3059\u3002 \u8106\u5f31\u6027\u767a\u898b\u306e\u7d4c\u7def \u300c2026\u5e747\u670831\u65e5\u3001...", "creation_timestamp": "2026-08-03T14:45:09.746706Z"}, {"uuid": "6ef571e9-ac19-4b35-99eb-3565fca6fec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3ms6qjy2efs24", "content": "Cybersecurity is facing a systemic trust crisis. \n\nFrom the 'god-mode' vulnerability in N-able's N-central (CVE-2026-18577) that puts MSPs and their entire customer base at risk, to the Octagon spyware masquerading as government apps on Android, attackers are exploiting every possible trust vecto...", "creation_timestamp": "2026-08-03T14:48:01.622324Z"}, {"uuid": "bfba4ec5-f238-4426-b43f-63cf696e2961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/stiffeo.bsky.social/post/3msayvk6cyk2h", "content": "\ud83d\udea8 CRITICAL: CVE-2026-18577 in N-able N-central \n\nAn active authentication bypass is currently being exploited in the wild and has been added to the CISA KEV list! \u26a0\ufe0f\n\nAction: Apply vendor patches immediately to secure your environment. \n\n#InfoSec #CyberSecurity #CVE #CISA", "creation_timestamp": "2026-08-04T12:22:59.490402Z"}, {"uuid": "4dde779e-97c8-4eda-9caa-07841ac810c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-03T15:00:05.370868Z"}, {"uuid": "7c63f857-0f90-4b5b-bea7-5d383edbff55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3ms6rwxvxbz2u", "content": "N-able disclosed a critical vulnerability (CVE-2026-18577) in its N-central RMM platform, allowing unauthenticated attackers to gain full administrative access. This affects all supported versions and is actively exploited. A hotfix (2026.3.1.7) was released on August 2, urging immediate upgrades.", "creation_timestamp": "2026-08-03T15:13:10.698498Z"}, {"uuid": "5fd4f0a3-9592-4ed4-b0af-9daec5157c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vyizska2s", "content": "CVE-2026-18577 is being exploited in the wild for N-central account takeover. An incomplete patch let attackers gain admin access. Update to 2026.3.1.7.\n\n#Nable #Ncentral #CVE202618577 #AccountTakeover #RMM #CyberSecurity", "creation_timestamp": "2026-08-03T16:25:51.417101Z"}, {"uuid": "678cf9e7-68e7-451e-9030-bab9b2042e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3ms6xybpjh52q", "content": "N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers.", "creation_timestamp": "2026-08-03T17:01:16.924281Z"}, {"uuid": "eea101ac-04c4-452f-8694-ca74824d8b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6ydvads62b", "content": "N-able\u3001\u5b9f\u969b\u306b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bN-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3092\u8b66\u544a\n\nN-able\u306f\u3001\u30db\u30b9\u30c8\u578b\u3068\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3059\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304c\u3001\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u9867\u5ba2\u306b\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u540c\u793e\u306f\u65e5\u66dc\u65e5\u3001\u3053\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u30db\u30c3\u30c8\u30d5\u30a3\u30c3\u30af\u30b92026.3.1.7\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f2026.3\u3088\u308a\u524d\u306e\u3059\u3079...", "creation_timestamp": "2026-08-03T17:07:46.104816Z"}, {"uuid": "7c20d7c5-ed09-49a2-b7ce-4e80d89568fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms6zmsjwil23", "content": "\ud83d\udea8 Breaking: N-able warns of N-central auth bypass flaw exploited in attacks\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\n\ud83d\udd17 https://hnow.live/a/c2a1beae", "creation_timestamp": "2026-08-03T17:30:39.000159Z"}, {"uuid": "33ee3693-f720-4824-8f14-78bbc0a7c1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032836649829655", "content": "It is possible to see elevated activities targeting N-able N-central (CVE-2026-18577) https://vuldb.com/vuln/385422/cti", "creation_timestamp": "2026-08-03T17:49:28.231077Z"}, {"uuid": "be22de9a-9426-4182-aee7-c02c20c58b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-03T18:00:04.177241Z"}, {"uuid": "66946c1c-2393-401e-9063-4e230072440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T18:00:05.338172Z"}, {"uuid": "26102602-445a-486a-84c9-0eb2308f77e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3ms77q5isht2b", "content": "\ud83d\uded1 CVE-2026-18577\nN-able N-central\nCVSS 8.2 / EPSS 1% / KEV: No\nTL;DR: An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeov\u2026\nhttps://cvesentinel.com/report/CVE-2026-18577?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-03T19:19:53.428512Z"}, {"uuid": "cd9dd0e8-0035-489f-95ef-5f537114a1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7bjrt6mo24", "content": "N-central\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\uff08CVE-2026-18577\uff09\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u5229\u7528\u3057\u3001\u30db\u30b9\u30c8\u578b\u30fb\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3002", "creation_timestamp": "2026-08-03T19:52:07.667067Z"}, {"uuid": "0e65b8cd-a17f-4ae1-86ff-ddcc178391b2", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a013613c-01b8-42e9-ab38-5ae39e63141e", "content": "", "creation_timestamp": "2026-08-03T20:00:02.408785Z"}, {"uuid": "7adf1075-6b45-410c-ba8d-cbe8daf721cd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ce14e1c-ac05-49ca-81bc-1978117d0c8b", "content": "", "creation_timestamp": "2026-08-03T20:00:22.358636Z"}, {"uuid": "1a2fcc21-bac5-42cb-a639-860f1acfda34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/morningnode.bsky.social/post/3ms7cgrwivy2u", "content": "N-able on-prem N-central customers need to manually install hotfix 2026.3.1.7 after active exploitation of CVE-2026-18577. Verify patching and review the published indicators of\u2026\nhttps://themorningnode.com/news/aGIkbGyFHEEW7sRwnxaV9?utm_source=bluesky&utm_medium=social&utm_campaign=the-morning-node", "creation_timestamp": "2026-08-03T20:08:20.530350Z"}, {"uuid": "ebeeef60-4fbd-4eba-a75b-6b7c39de8632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms7dovmmkt2u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-18577 N-able N-central\u2026\n\n\ud83d\udd17 https://hnow.live/a/dd8d41da", "creation_timestamp": "2026-08-03T20:30:47.312509Z"}, {"uuid": "5e8753ec-34a1-4560-bc30-99a31e6e523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3ms7euvqoup2d", "content": "\ud83e\udd16 CVE-2026-18577: auth bypass in N-able N-central actively exploited. Incomplete fix for CVE-2026-18576; both allow admin takeover. Hotfix 2026.3.1.7 out, on-prem must patch.\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T20:52:01.979837Z"}, {"uuid": "2100b513-a924-4a6d-a1ce-c72c41071575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3ms7fdni2t32t", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)\n\n\u26a0\ufe0f CVE-2026-18577 - N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-03T21:00:16.454458Z"}, {"uuid": "5c7f9c33-fb3d-443a-8f00-94b62c3f8335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/isuvo.bsky.social/post/3ms7ioolvm523", "content": "Dissecting the CVE-2026-18577 patch bypass in N\n\nhttps://ixuvo.com/blog/unauthenticated-god-mode-bypassing-patch-n-central-rmm-cve-2026-18577", "creation_timestamp": "2026-08-03T22:00:08.310413Z"}, {"uuid": "2b71a6d7-caac-4df0-8195-831005aec999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms7ipsttjk2m", "content": "Attackers Exploit N-able Patch Bypass Flaw on RMM Servers\nOver the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.\n\n\ud83d\udd17 https://hnow.live/a/c6000199", "creation_timestamp": "2026-08-03T22:00:46.385738Z"}, {"uuid": "3509e5c5-1a12-4ef4-9729-44b2c04dc667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3ms7j3nxn4c24", "content": "ALERT: Active exploitation verified for CVE-2026-18577 in N-able N-central. Unauthenticated attackers can execute account takeovers via alternate path manipulation. Access our complete threat breakdown, SPL/KQL detection logic, and hardening guidance here:\u2026", "creation_timestamp": "2026-08-03T22:07:24.302331Z"}, {"uuid": "6b863ecf-4cc1-4ad3-9c24-05f0d278984b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3ms7n26a2um26", "content": "URGENT C-SUITE BRIEF: Active exploitation verified on CISA KEV for CVE-2026-18577 (N-able N-central). Executive leadership must oversee immediate patch deployment, supply chain auditing, and trust model revalidation to safeguard organizational assets. Full strategic analysis:\u2026", "creation_timestamp": "2026-08-03T23:18:09.094450Z"}, {"uuid": "100b81e8-73b2-4881-b1ab-cd6d7cbfa58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-04T00:00:29.274806Z"}, {"uuid": "f352e4cb-f6cc-4b14-8d73-7de1b5ebba56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-04T00:00:39.750998Z"}, {"uuid": "9cbdc771-e8e5-4ee6-9d13-b71fe3a9102c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-04T00:00:35.437785Z"}, {"uuid": "498cec77-da21-4a7a-a34a-def2b2d3c95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msb324n5vk2b", "content": "Kritieke kwetsbaarheid in N-able N-central stelt aanvallers in staat tot systeem\n\nEen ernstige beveiligingskwetsbaarheid, bekend als CVE-2026-18577, is ontdekt in het N-able N-central platform, een tool die door managed service providers (MSP's) wordt gebruikt voor extern beheer en monitorin...", "creation_timestamp": "2026-08-04T13:01:19.047629Z"}, {"uuid": "002cc851-1f02-4090-a838-ae7a85d3d3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3ms7rwadug724", "content": "N-able says CVE-2026-18577 is being actively exploited in N-central hosted and on-prem servers before 2026.3. Hotfix 2026.3.1.7 is available for the auth bypass flaw. #Ncentral #CVE202618577 #Nable", "creation_timestamp": "2026-08-04T00:45:25.951432Z"}, {"uuid": "bb0d6107-d32c-46a2-bdb0-8b0d34d2f7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-04T01:00:12.309643Z"}, {"uuid": "be3b9d1b-f02a-46e8-bf89-2e2172aa9f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-04T01:00:33.828982Z"}, {"uuid": "816d742e-8986-4b26-9ee5-1e57b75d732a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-04T01:00:33.526866Z"}, {"uuid": "7913f722-a9e5-4486-94e0-b67a50cd02b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/attackers-exploit-n-able-patch-bypass-flaw", "content": "Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.", "creation_timestamp": "2026-08-04T01:00:35.315862Z"}, {"uuid": "e8ec1b53-554e-41e0-821d-199666c044e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msb462yury2s", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-18577](https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_20...\nhttps://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-04T13:21:25.571539Z"}, {"uuid": "acbf55d1-6b55-403a-9e2e-a1cf3b872465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msb47v56zl27", "content": "CVE-2026-18577 \u00b7 trending #8\n\nCurrently trending CVE - Hype Score: 3 - An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18577", "creation_timestamp": "2026-08-04T13:22:30.286827Z"}, {"uuid": "64464309-d06b-4c89-9114-207473e4ffc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3msb4wfjos42h", "content": "Fresh exploitation signal\n\nCISA added N-central CVE-2026-18577 to KEV on evidence of active exploitation. N-able says instances below 2026.3.1 need the 2026.3.1.7 hotfix.", "creation_timestamp": "2026-08-04T13:35:01.536816Z"}]}