CISA Adds Exploited N-able N-central Flaw (CVE-2026-18577) to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw, CVE-2026-18577, affecting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability, an incomplete patch for CVE-2026-18556, allows for authentication bypass and account takeover in susceptible versions of the software. CISA's addition to the KEV catalog indicates active exploitation in the wild, urging federal agencies and other organizations to apply the available fixes by August 6, 2026.