> TritonInfoSec News
Home / Aug 05, 2026 / Story
0
#6 The Hacker News general August 04, 2026 at 07:00 UTC

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-18577 (CVSS 8.2) affecting N-able N-central to its Known Exploited Vulnerabilities catalog after active exploitation was confirmed; the flaw is an incomplete patch for CVE-2026-18556 (also CVSS 8.2) that allows authentication bypass to gain administrator access. N-able N-central is widely used as an RMM platform by MSPs, making this a high-value target for threat actors seeking broad downstream access. Both hosted and on-premises N-central deployments are affected, and patching is urgent.

Read full article → https://thehackernews.com/2026/08/cisa-adds-exploi…

Relevance score: 85.0/100

# More from August 05

  1. 1
    Massive ChainDrop npm supply-chain attack infects hundreds of packages BleepingComputer
  2. 2
    Massive supply-chain attack compromises 440 packages under four hours CyberScoop
  3. 3
    Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks The Hacker News
  4. 4
    New Pass-ta-key attacks let malware hijack Google-synced passkeys BleepingComputer
  5. 5
    Prolific ransomware group behind SonicWall zero-day attacks CyberScoop
  6. 7
    Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says The Record
  7. 8
    OpenAI, Anthropic AI agents targeted real people and systems in cyber tests BleepingComputer
  8. 9
    US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States SecurityWeek
  9. 10
    TP-Link patches Omada ZTP flaws allowing hackers to breach networks BleepingComputer