Developing3 outlets · over 6 hours
N-able patches exploited N-central auth bypass flaw
N-able shipped hotfix 2026.3.1.7 for CVE-2026-18577, an authentication bypass in N-central exploited in attacks. The flaw bypasses an incomplete fix for CVE-2026-18556, allowing administrative account takeover. Attackers used Take Control and Cloudflare tunnels to reach managed endpoints.
The story so far2 updates, latest first.
Tracked by ByteBrief