security_identifier

CVE-2026-18556

Identifier for an earlier authentication bypass in N-able N-central whose fix proved incomplete.

Current clusters

Attackers seized MSP N-central servers through the bypass N-able's incomplete fix left open

N-able's fix for one N-central authentication bypass produced another that was already being exploited, and the hotfix for that was replaced four days later. Three N-central CVEs now sit in CISA's exploited catalog.

Publishers:rapid7.com

Reality

Evidence64
Adoption58
Hype gap−8
Incentives58
Confidence62