Skip to content
OpenAdvisories
Medium 2 exploited CVEs WID-SEC-2026-2621 2 CVEs

N-able N-Central: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Aug 2, 2026 · Updated Aug 2, 2026 · de-DE

Vendor: N-able Product: N-central Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in N-able N-Central ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

N-able N-central ist eine Remote Monitoring and Management (RMM)-Plattform für Managed Service Provider (MSPs) und IT-Abteilungen

Vulnerabilities 2

  • High 8.2
    CVE-2026-18556 Exploited Public exploit EPSS 44%

    Unauthenticated administrative account takeover

    Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

    N-able N-central
    KEV Aug 4, 2026
  • High 8.2
    CVE-2026-18577 Exploited Public exploit Scanner template EPSS 15%

    Incomplete patch leads to administrative account takeover

    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

    N-able N-central
    KEV Aug 3, 2026

Revision history

  1. #1

    Initiale Fassung

References