Authentication Bypass and Account Takeover in N-central from N-able
CVE-2026-18577

8.2HIGH

Key Information:

Vendor

N-able

Status
N-central
Vendor
CVE Published:
2 August 2026

What is CVE-2026-18577?

An incomplete fix for prior vulnerabilities has left N-central susceptible to an authentication bypass, enabling potential account takeovers. This affects multiple versions of the software, which remain vulnerable until addressed with a proper patch.

Affected Version(s)

N-central 0 <= 2026.3

N-central 2026.3.1.7

References

https://documentation.n-able.com/N-central/Release_Notes/...
https://status.n-able.com/2026/08/02/n-central-2026-3-hot...
https://www.cve.org/CVERecord?id=CVE-2026-18556

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.