N-able N-central < 2026.3.1.10 - Authentication Bypass
CVE-2026-18577
Verified
Description
N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1 build (2026.3.1.7) does not fully remediate it. Hotfix 2 (2026.3.1.10) supersedes Hotfix 1 and is the first fully fixed 2026.3 build.
Severity
Critical
CVSS Score
8.1
Exploit Probability
15%
Affected Product
n-central
Published Date
August 7, 2026
Template Author
patrick-threatmate
CVE-2026-18577.yaml
8.1Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-18577
CWE ID:
cwe-288
References
https://www.n-able.com/blog/n-central-security-update-august-6-2026https://status.n-able.com/2026/08/06/n-central-2026-3-hotfix-2-additional-mitigation-for-cve-2026-18577/https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild/https://www.huntress.com/blog/n-able-vulnerability-exploitationhttps://nvd.nist.gov/vuln/detail/CVE-2026-18577https://nvd.nist.gov/vuln/detail/CVE-2026-18556
Remediation Steps
Upgrade on-premises N-central to 2026.3.1.10 (2026.3 Hotfix 2) or to a later release line (2026.4 or newer). Applying Hotfix 1 (2026.3.1.7) alone is not sufficient. N-able hosted environments were mitigated by the vendor and need no customer action.