VulnerabilityBleeping Computer
9.0 — CRITICAL
N-able warns of N-central auth bypass flaw exploited in attacks
N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
N-central, a remote monitoring and management platform used by MSPs and corporate IT departments, has been exploited by hackers due to an authentication bypass vulnerability (CVE-2026-18577), allowing threat actors to extend the attack beyond N-able's direct customers.
⚙️Technical Details
💥Impact Assessment
Severity: critical
Who Is at Risk
customers of N-central, including hosted and on-premises deployments
🛡️Recommended Actions
1Customers should immediately upgrade to the new release (hotfix 2026.3.1.7) to address the security issue.
2Monitor environments closely for suspicious activity and contact N-able support if indicators of compromise are found.
3Implement additional security measures, such as agents not needing immediate updates but getting the latest fixes and features.
📦Affected Products
Product Name: N-centralVersion Range: all versions before 2026.3
🔐NVD Verified DataVERIFIED
Weaknesses
CWE-288
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.