Critical N-able N-central Vulnerability (CVE-2026-18577) Under Active Exploitation

A critical authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution, is being actively exploited by attackers. This flaw allows unauthorized access to managed endpoints, with N-able confirming breaches in a "limited" number of customer installations where administrative accounts were compromised. The vendor has released hotfix 2026.3.1.7, which is automatically applied to vendor-hosted instances, but self-hosted customers must manually implement the fix.