{"id":2190,"date":"2026-08-04T08:50:05","date_gmt":"2026-08-04T08:50:05","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=2190"},"modified":"2026-08-04T08:50:05","modified_gmt":"2026-08-04T08:50:05","slug":"cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromises","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=2190","title":{"rendered":"CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Aug 04, 2026<\/span><\/span>Vulnerability \/ Enterprise Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added<\/a> a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV<\/a>) catalog following reports of active exploitation in the wild.<\/p>\n

The vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows authentication bypass and account takeover in susceptible versions of the software. The issue has been addressed in version 2026.3 HF1.<\/p>\n

\u00abN-able N-central contains an authentication bypass using an alternate path or channel [that] allows for authentication bypass and account takeover in N-central,\u00bb CISA said.<\/p>\n

Successful exploitation of the vulnerability can permit remote attackers to gain administrative access to vulnerable N-central servers and then abuse the built-in Take Control feature to pivot into managed endpoints and deploy persistence mechanisms.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

N-able has shared the following indicators of compromise –<\/p>\n