CISA Adds Exploited N-able N-central Flaw to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity authentication bypass vulnerability (CVE-2026-18577) in N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog. This flaw, an incomplete patch for CVE-2026-18556, allows authentication bypass and account takeover, with active exploitation reported in the wild. Federal Civilian Executive Branch agencies are advised to apply fixes by August 6, 2026.