N-able Issues Second Hotfix for Actively Exploited Zero-Day Flaw in N-central

N-able has released Hotfix 2 for its N-central RMM product to address an actively exploited zero-day vulnerability, CVE-2026-18577. This flaw, an incomplete fix for a previous issue, allows authentication bypass and account takeover, enabling attackers to gain administrative access and maintain persistence via Cloudflare Tunnel. Users are urged to apply the patch immediately to mitigate significant security risks.