Incomplete patch leads to administrative account takeover

Description

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Affected Products

Vendor	Product	Versions
n-able	n-central	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
n-able	n-central	cert_advisory	90%

References

Related News (7 articles)

Tier D

The Hacker News2h ago

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

→ No new info (linked only)

Tier D

Dark Reading11h ago

Attackers Exploit N-able Patch Bypass Flaw on RMM Servers

→ No new info (linked only)

Tier D

BleepingComputer16h ago

N-able warns of N-central auth bypass flaw exploited in attacks

→ No new info (linked only)

Tier D

Help Net Security18h ago

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.3.1.7

CWECWE-288

PublishedAug 2, 2026

Trending Score76

Source articles7

Independent6

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Incomplete patch leads to administrative account takeover

Description

Affected Products

Also Affects

References

Related News (7 articles)

Community Vote

Related CVEs (1)

Pin to Dashboard

Verification

Vulnerability Timeline