ShellCodeX
Tools • Events • News • Insights
ShellCodeX Intelligence Brief
HIGH Vulnerabilities

CISA adds KEV listing for N-able N-central bug with active exploitation (CVE-2026-18577)

Source headline: CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

Threat level High
Signal strength 85/100
Source confidence 1 source
Published 3 hours ago

Intelligence Summary

CISA has added a high-severity vulnerability in N-able N-central to its KEV catalog. The issue is tracked as CVE-2026-18577 and received a CVSS score of 8.2. CISA says the flaw relates to incomplete patching associated with CVE-2026-18556. Reports indicate the vulnerability is being exploited in the wild. Organizations using N-able N-central should verify patch status and apply the fixed updates immediately to reduce compromise risk.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics

#vulnerability-management #cisa-kev #remote-exploitation #n-central #in-the-wild
Original reporting The Hacker News CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
Open original source

Related Pulse Signals

View all signals
Critical · Vulnerabilities Old BMC auth flaw leaks credentials from exposed server management ports Critical · Vulnerabilities N-able issues guidance for N-central auth bypass (CVE-2026-18577) Critical · Vulnerabilities N-able N-central flaw CVE-2026-18577 already being exploited via patch bypass High · Vulnerabilities Thermo Fisher fixes CVE-2026-17583 that could hide DNA file tampering