N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

Summary

N-able has reported that attackers successfully exploited an authentication bypass vulnerability in their N-central platform, leading to unauthorized administrative access and compromise of customer systems. The company acknowledged that its initial fix for the vulnerability, identified as CVE-2026-18577, was incomplete.

IFF Assessment

FOE

Attackers exploiting a vulnerability to gain administrative access to managed systems represents a significant threat to defenders.

Severity

9.0 Critical (AI Estimated)

The vulnerability allows for authentication bypass and remote administrative access, which typically carries a high CVSS score due to its potential for widespread impact and ease of exploitation.

Defender Context

This incident highlights the critical importance of thoroughly testing and validating security patches before deployment, as incomplete fixes can leave systems vulnerable. Defenders should prioritize patching N-central servers and verifying that the latest, complete fix has been applied to prevent further compromise.

Read Full Story →