N-able has issued an emergency hotfix for a critical authentication bypass vulnerability in its N-central platform, which is widely used for remote monitoring and management of servers and network devices.
The vulnerability, identified as CVE-2026-18577, enables attackers to bypass authentication via alternative routes or channels, potentially leading to full account takeover. It impacts N-central 2026.1 and all prior versions.
Security researchers note that the issue arose because the earlier fix for CVE-2026-18556 proved insufficient, allowing the new bypass vector to emerge. The flaw received a CVSS v4.0 base score of 8.2 and is classified as High severity.
Active exploitation has already been confirmed, and Indicators of Compromise (IoCs) such as associated IP addresses have been published to help organizations detect potential intrusions.
On August 2, 2026, N-able released the official mitigation in the form of N-central 2026.3 Hotfix 1 (build 2026.3.1.7). While the company strongly recommends immediate deployment, it has not made the update mandatory. It also suggests updating management agents as an additional precaution.
