CVE-2026-18577
KEVN-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
8.2
HighPublished:
Last updated:
Source:a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
Analyzed
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- High
- Attack Requirements
- None
- Privileges Required
- None
- User Interaction
- None
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- None
- Availability (Vulnerable)
- None
- Confidentiality (Subsequent)
- Low
- Integrity (Subsequent)
- Low
- Availability (Subsequent)
- Low
Description
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
References
a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htma5532a13-c4dd-4202-bef1-e0b8f2f8d12b
https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
https://www.cve.org/CVERecord?id=CVE-2026-18556134c704f-9b21-4f2e-91b3-4a467353bcc0
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18577134c704f-9b21-4f2e-91b3-4a467353bcc0
https://www.n-able.com/blog/n-central-security-update-august-2-2026