{"vulnerability": "CVE-2026-18577", "sightings": [{"uuid": "3e87f865-67b8-4154-9650-98a41b790eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-03T10:00:37.555686Z"}, {"uuid": "36d94597-b09d-4f15-9596-855b4b519b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-03T10:00:37.811149Z"}, {"uuid": "77befedc-a7a7-4acf-8779-14ca13ce913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3ms6idtbdml2u", "content": "N-able N-central, the console MSPs use to run thousands of customer machines, has an actively exploited auth bypass (CVE-2026-18577).\n\nThe first patch was bypassable.\n\nFix: upgrade to 2026.3.1.7, then hunt the managed endpoints.", "creation_timestamp": "2026-08-03T12:21:24.729766Z"}, {"uuid": "12ea37f7-1776-4ce6-b874-478d99f93bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3ms6jmnkjub2m", "content": "CVE-2026-18577 enables authentication bypass in N-central, letting attackers take over accounts, gain admin access, and persist via Cloudflare tunnels.\n", "creation_timestamp": "2026-08-03T12:44:14.756237Z"}, {"uuid": "060b7ecd-c3a5-4caf-828a-403e55dde56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbu2xq32m", "content": "CVE-2026-18577: Attackers Exploit N-able's N-central to Gain Admin Access #CVE2026 #CyberSecurity #Ncentral", "creation_timestamp": "2026-08-03T13:16:33.922885Z"}, {"uuid": "d6475caf-d2cb-416f-94f0-d18aca00e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbxh43e22", "content": "CVE-2026-18577: N-able's Patch Raises Questions on Vulnerability Management #CVE2026 #Nable #PatchManagement", "creation_timestamp": "2026-08-03T13:16:35.319142Z"}, {"uuid": "ff045507-482f-426b-a9cb-298c04355be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-03T13:23:47.987657Z"}, {"uuid": "08069327-6b13-48b6-86bd-3af4d0307053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3ms6q5hrmdc26", "content": "Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/03/c...\n\n#vulnerability #remotemanagement #cybersecuritynews", "creation_timestamp": "2026-08-03T14:41:03.610427Z"}, {"uuid": "3a69f60f-8497-44f8-8da5-95cf34d802f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3ms6q7tmtvq2p", "content": "N\u2011able parchea CVE-2026-18577 tras acceso a consolas N-central\n\nN\u2011able parche\u00f3 CVE-2026-18577 tras explotaci\u00f3n que permiti\u00f3 a atacantes tomar consolas\u2026\n\nhttps://mentehackers.com/n-able-cve-2026-18577-n-central-exploit-7378d93c\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-03T14:42:20.920876Z"}, {"uuid": "28715fdf-fa72-4f75-82dc-ab678ad920ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6qev4evs2w", "content": "\u653b\u6483\u8005\u304cN-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u4fb5\u5165\n\n\u653b\u6483\u8005\u306f\u3001\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc(MSP)\u306b\u5e83\u304f\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u30ea\u30e2\u30fc\u30c8\u76e3\u8996\u30fb\u7ba1\u7406(RMM)\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cN-able N-central\u300d\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u3001\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5f97\u3066\u3044\u307e\u3059\u3002 \u8106\u5f31\u6027\u767a\u898b\u306e\u7d4c\u7def \u300c2026\u5e747\u670831\u65e5\u3001...", "creation_timestamp": "2026-08-03T14:45:09.746706Z"}, {"uuid": "6ef571e9-ac19-4b35-99eb-3565fca6fec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3ms6qjy2efs24", "content": "Cybersecurity is facing a systemic trust crisis. \n\nFrom the 'god-mode' vulnerability in N-able's N-central (CVE-2026-18577) that puts MSPs and their entire customer base at risk, to the Octagon spyware masquerading as government apps on Android, attackers are exploiting every possible trust vecto...", "creation_timestamp": "2026-08-03T14:48:01.622324Z"}, {"uuid": "4dde779e-97c8-4eda-9caa-07841ac810c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-03T15:00:05.370868Z"}, {"uuid": "7c63f857-0f90-4b5b-bea7-5d383edbff55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3ms6rwxvxbz2u", "content": "N-able disclosed a critical vulnerability (CVE-2026-18577) in its N-central RMM platform, allowing unauthenticated attackers to gain full administrative access. This affects all supported versions and is actively exploited. A hotfix (2026.3.1.7) was released on August 2, urging immediate upgrades.", "creation_timestamp": "2026-08-03T15:13:10.698498Z"}, {"uuid": "5fd4f0a3-9592-4ed4-b0af-9daec5157c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vyizska2s", "content": "CVE-2026-18577 is being exploited in the wild for N-central account takeover. An incomplete patch let attackers gain admin access. Update to 2026.3.1.7.\n\n#Nable #Ncentral #CVE202618577 #AccountTakeover #RMM #CyberSecurity", "creation_timestamp": "2026-08-03T16:25:51.417101Z"}, {"uuid": "678cf9e7-68e7-451e-9030-bab9b2042e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3ms6xybpjh52q", "content": "N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers.", "creation_timestamp": "2026-08-03T17:01:16.924281Z"}, {"uuid": "eea101ac-04c4-452f-8694-ca74824d8b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6ydvads62b", "content": "N-able\u3001\u5b9f\u969b\u306b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bN-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3092\u8b66\u544a\n\nN-able\u306f\u3001\u30db\u30b9\u30c8\u578b\u3068\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3059\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304c\u3001\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u9867\u5ba2\u306b\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u540c\u793e\u306f\u65e5\u66dc\u65e5\u3001\u3053\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u30db\u30c3\u30c8\u30d5\u30a3\u30c3\u30af\u30b92026.3.1.7\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f2026.3\u3088\u308a\u524d\u306e\u3059\u3079...", "creation_timestamp": "2026-08-03T17:07:46.104816Z"}, {"uuid": "7c20d7c5-ed09-49a2-b7ce-4e80d89568fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms6zmsjwil23", "content": "\ud83d\udea8 Breaking: N-able warns of N-central auth bypass flaw exploited in attacks\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\n\ud83d\udd17 https://hnow.live/a/c2a1beae", "creation_timestamp": "2026-08-03T17:30:39.000159Z"}, {"uuid": "33ee3693-f720-4824-8f14-78bbc0a7c1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032836649829655", "content": "It is possible to see elevated activities targeting N-able N-central (CVE-2026-18577) https://vuldb.com/vuln/385422/cti", "creation_timestamp": "2026-08-03T17:49:28.231077Z"}, {"uuid": "be22de9a-9426-4182-aee7-c02c20c58b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-03T18:00:04.177241Z"}, {"uuid": "66946c1c-2393-401e-9063-4e230072440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T18:00:05.338172Z"}]}