SECURELYN
Free ScanFree consultation

CVE-2026-18577

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Scores

8.2
CVSS 8.2 out of 10, high severity.
14.6%
EPSS 14.6% chance of exploitation in the next 30 days.

The facts

Published
2 August 2026
Last changed
4 August 2026
NVD status
Analyzed
Severity
High, CVSS 8.2 out of 10 (version 4.0)
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R…
Weakness
Affects
  • n-able n-central
Known exploited
Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 3 August 2026.
EPSS
14.6% chance of exploitation activity in the next 30 days (percentile 97).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References