{"uuid": "cec6e8bc-6ef0-4f09-af9e-35ba1a562029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3msjjggbi4s2f", "content": "While Microsoft has not confirmed the vulnerability targeted by Storm-1175 in this campaign, the threat actor is likely exploiting the CVE-2026-18577 authentication bypass vulnerability in N-able, which was disclosed on August 2, 2026 and added to the CISA KEV catalog on August 3, 2026.", "creation_timestamp": "2026-08-07T21:46:37.193040Z"}