CVE-2026-18577

N-able N-central Vulnerability

N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.

CVSS Score

9.8

CRITICAL

Published

03 Aug 2026 00:00

Modified

N/A

Vendor

N-able

Product

N-central

Source

CIRCL

Affected Versions

Fix Vendor Patch / Mitigation Available

Weaknesses (CWE)

CWE-288

References

nvd.nist.gov /vuln/detail/CVE-2026-18577 cve.circl.lu /cve/CVE-2026-18577 cve.mitre.org /cgi-bin/cvename.cgi vuldb.com /

Affected Systems

N-able

N-central

N-able

N-central

External Links

NVD Database CIRCL CISA KEV

KEV Status

Known Exploited Vulnerability