{"vulnerability": "CVE-2026-18577", "sightings": [{"uuid": "d9b0f2d3-ac66-4b6a-8cf2-250af6956cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msa6kf4tje2n", "content": "The latest update for #ArcticWolf includes \"CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate #Patching\" and \"You Can't Buy Your Way Out of Downtime\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-04T04:31:26.222428Z"}, {"uuid": "155097ce-1293-4318-8346-3145972307c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-18577: 30 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 30 interactions\nCVE-2026-51302: 4 interactions\nCVE-2026-45820: 3 interactions\n", "creation_timestamp": "2026-08-04T04:47:06.729334Z"}, {"uuid": "16465637-1c1c-4a52-9409-c79e4d9e152d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117037728063764089", "content": "CISA added this vulnerability to the catalogue yesterday, if you missed it: \nCVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-18577\nArctic Wolf: CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching https://arcticwolf.com/resources/blog/cve-2026-18556-cve-2026-18577/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-08-04T14:33:29.898893Z"}, {"uuid": "39da6e31-e5a9-4efe-8f80-4c950308860a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabbkue2x2e", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Aug 3)\n\nCVE-2026-18577 N-able N-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\uff08\u4ee3\u66ff\u30d1\u30b9\u307e\u305f\u306f\u30c1\u30e3\u30cd\u30eb\u306e\u4f7f\u7528\uff09\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-04T05:20:11.761215Z"}, {"uuid": "affc7169-f8ed-4fcd-89d7-a4fdfd82f6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msbe4u6rjk2a", "content": "Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)\n\nAttackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution widely used by managed service providers, to\u2026\n#hackernews #news", "creation_timestamp": "2026-08-04T15:44:00.566991Z"}, {"uuid": "9338f163-4983-4837-a4cc-fc09b47a95b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24", "content": "~Cybergcca~\nSix advisories covering critical vulnerabilities in N-able, IBM, Dell, WebPros, Tenable, and Check Point products, including an actively exploited N-able flaw.\n-\nIOCs: CVE-2026-18577, CVE-2026-58047, CVE-2026-18574\n-\n...", "creation_timestamp": "2026-08-04T16:07:10.632775Z"}, {"uuid": "3e87f865-67b8-4154-9650-98a41b790eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-03T10:00:37.555686Z"}, {"uuid": "36d94597-b09d-4f15-9596-855b4b519b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-03T10:00:37.811149Z"}, {"uuid": "ea1cfcda-c0b7-4277-8da7-878a1a826bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/n-able-security-advisory-av26-769", "content": "", "creation_timestamp": "2026-08-04T16:15:12.523339Z"}, {"uuid": "a5e9b151-2e74-4034-bbb5-409f0d388ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msajjuonjb2h", "content": "\ud83d\udcf0 N-able Peringatkan Celah Kritis N-central yang Sudah Dieksploitasi Hacker\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/04/cve-2026-18577-n-central-authentication-bypass/\n\n#authenticationBypass #cloudflared #cve-2026-18577 #cyberSecurity #msp #n-able #n-central #rmm", "creation_timestamp": "2026-08-04T07:48:00.142835Z"}, {"uuid": "d918310d-d4a5-404f-a08a-36e1aba74ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/thehackernews/9699", "content": "\u26a0\ufe0f N-central attacks are reaching managed endpoints.\n\nAttackers are exploiting CVE-2026-18577 to bypass authentication, gain admin access, and abuse Take Control for lateral movement. N-able confirms limited customer compromises, and CISA has added the flaw to KEV.\n\nWhat defenders need to check: https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T08:00:05.690439Z"}, {"uuid": "2288249b-7d72-4343-950e-735be530ee9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.605265Z"}, {"uuid": "48636abc-9622-40e8-a7ed-09f911777825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "Telegram/gkPs5Wjt5WHvC26RJXYmF2UWxeus-aPenNIWkoSGDD5BJA", "content": "", "creation_timestamp": "2026-08-04T17:00:04.677486Z"}, {"uuid": "a3d66ba4-c8ad-4b52-8194-1e1684044b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msan273gdw2j", "content": "N-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304cCISA\u306eKEV\u306b\u8ffd\u52a0\u3002\u9867\u5ba2\u3078\u306e\u5f71\u97ff\u304c\u78ba\u8a8d\u3055\u308c\u3001\u4e0d\u6b63\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-08-04T08:50:52.065276Z"}, {"uuid": "f76b342a-7e91-47e3-9873-6214e7add5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3msbmaayzks2f", "content": "CISA \"added high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild\" thehackernews.com/2026/08/cisa... \"CVE-2026-18577 (CVSS score: 8.2) .. incomplete patching for CVE-2026-18556\" #cybersec tech", "creation_timestamp": "2026-08-04T18:09:04.590625Z"}, {"uuid": "c8d6e3c0-d23a-4e4b-9ca9-91a835a43307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msaoprsbfc2t", "content": "\ud83e\udd16 CVE-2026-18577 (CVSS 8.2): authentication bypass in N-able N-central added to CISA KEV after active exploitation. Incomplete patch of CVE-2026-18556, gives admin access on RMM servers.\nhttps://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-04T09:20:47.321110Z"}, {"uuid": "db3f70cf-bd53-487e-857e-53642f12e55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msaprjy5dr2t", "content": "The patch was supposed to fix the hole. It didn't.\n\nCVE-2026-18577.\n\nhttps://www.yazoul.net/malware/mirai-2026-08/reports/2026-08-02/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-04T09:39:39.919627Z"}, {"uuid": "87a329a4-a36a-4f24-88aa-a56bdaa22e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msbre6kpu22a", "content": "N-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n#hackernews #news", "creation_timestamp": "2026-08-04T19:40:39.458901Z"}, {"uuid": "405ae243-57b7-4673-8797-d6fd4830afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows", "creation_timestamp": "2026-08-04T10:00:43.486981Z"}, {"uuid": "26d89255-a5f2-49fd-aeb1-11bcaa8fc1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.acn.gov.it/portale/w/n-able-rilevato-sfruttamento-attivo-in-rete-della-cve-2026-18577", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-18577 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in N-able N-central, piattaforma avanzata di Remote Monitoring and Management (RMM) progettata con l\u2019obiettivo di gestire, proteggere e automatizzare infrastrutture IT complesse su larga scala. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-04T10:00:43.846533Z"}, {"uuid": "77befedc-a7a7-4acf-8779-14ca13ce913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3ms6idtbdml2u", "content": "N-able N-central, the console MSPs use to run thousands of customer machines, has an actively exploited auth bypass (CVE-2026-18577).\n\nThe first patch was bypassable.\n\nFix: upgrade to 2026.3.1.7, then hunt the managed endpoints.", "creation_timestamp": "2026-08-03T12:21:24.729766Z"}, {"uuid": "12ea37f7-1776-4ce6-b874-478d99f93bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3ms6jmnkjub2m", "content": "CVE-2026-18577 enables authentication bypass in N-central, letting attackers take over accounts, gain admin access, and persist via Cloudflare tunnels.\n", "creation_timestamp": "2026-08-03T12:44:14.756237Z"}, {"uuid": "060b7ecd-c3a5-4caf-828a-403e55dde56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbu2xq32m", "content": "CVE-2026-18577: Attackers Exploit N-able's N-central to Gain Admin Access #CVE2026 #CyberSecurity #Ncentral", "creation_timestamp": "2026-08-03T13:16:33.922885Z"}, {"uuid": "d6475caf-d2cb-416f-94f0-d18aca00e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms6lbxh43e22", "content": "CVE-2026-18577: N-able's Patch Raises Questions on Vulnerability Management #CVE2026 #Nable #PatchManagement", "creation_timestamp": "2026-08-03T13:16:35.319142Z"}, {"uuid": "ff045507-482f-426b-a9cb-298c04355be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-03T13:23:47.987657Z"}, {"uuid": "52f92c17-58d8-4f58-9cbf-bdc9a7fa4b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "published-proof-of-concept", "source": "Telegram/GMbxxZ0cu7FgkFldz0u81QH5ac9fGj43iJQuczkDRXYsUrg", "content": "", "creation_timestamp": "2026-08-04T12:00:09.171023Z"}, {"uuid": "a235e5fa-f7f5-41e9-922e-e9677d46a222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msaxrzh2gp23", "content": "832,000 reasons to stop negotiating with ransomware crews.\n\nHouston City College.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-18577-n-central-auth-bypass-exploited-in-the-wild/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-04T12:03:06.433822Z"}, {"uuid": "08069327-6b13-48b6-86bd-3af4d0307053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3ms6q5hrmdc26", "content": "Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/03/c...\n\n#vulnerability #remotemanagement #cybersecuritynews", "creation_timestamp": "2026-08-03T14:41:03.610427Z"}, {"uuid": "3a69f60f-8497-44f8-8da5-95cf34d802f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3ms6q7tmtvq2p", "content": "N\u2011able parchea CVE-2026-18577 tras acceso a consolas N-central\n\nN\u2011able parche\u00f3 CVE-2026-18577 tras explotaci\u00f3n que permiti\u00f3 a atacantes tomar consolas\u2026\n\nhttps://mentehackers.com/n-able-cve-2026-18577-n-central-exploit-7378d93c\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-03T14:42:20.920876Z"}, {"uuid": "28715fdf-fa72-4f75-82dc-ab678ad920ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6qev4evs2w", "content": "\u653b\u6483\u8005\u304cN-able N-central\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u4fb5\u5165\n\n\u653b\u6483\u8005\u306f\u3001\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc(MSP)\u306b\u5e83\u304f\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u30ea\u30e2\u30fc\u30c8\u76e3\u8996\u30fb\u7ba1\u7406(RMM)\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cN-able N-central\u300d\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-18577)\u3092\u60aa\u7528\u3057\u3001\u7ba1\u7406\u4e0b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5f97\u3066\u3044\u307e\u3059\u3002 \u8106\u5f31\u6027\u767a\u898b\u306e\u7d4c\u7def \u300c2026\u5e747\u670831\u65e5\u3001...", "creation_timestamp": "2026-08-03T14:45:09.746706Z"}, {"uuid": "6ef571e9-ac19-4b35-99eb-3565fca6fec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3ms6qjy2efs24", "content": "Cybersecurity is facing a systemic trust crisis. \n\nFrom the 'god-mode' vulnerability in N-able's N-central (CVE-2026-18577) that puts MSPs and their entire customer base at risk, to the Octagon spyware masquerading as government apps on Android, attackers are exploiting every possible trust vecto...", "creation_timestamp": "2026-08-03T14:48:01.622324Z"}, {"uuid": "bfba4ec5-f238-4426-b43f-63cf696e2961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/stiffeo.bsky.social/post/3msayvk6cyk2h", "content": "\ud83d\udea8 CRITICAL: CVE-2026-18577 in N-able N-central \n\nAn active authentication bypass is currently being exploited in the wild and has been added to the CISA KEV list! \u26a0\ufe0f\n\nAction: Apply vendor patches immediately to secure your environment. \n\n#InfoSec #CyberSecurity #CVE #CISA", "creation_timestamp": "2026-08-04T12:22:59.490402Z"}, {"uuid": "4dde779e-97c8-4eda-9caa-07841ac810c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-03T15:00:05.370868Z"}, {"uuid": "1330aafe-772c-4eae-85e1-529507bcf20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-05T00:00:26.296355Z"}, {"uuid": "c7505408-cbba-4bb2-9c61-45bdd60ed1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "Telegram/gkPs5Wjt5WHvC26RJXYmF2UWxeus-aPenNIWkoSGDD5BJA", "content": "", "creation_timestamp": "2026-08-05T00:00:26.367057Z"}, {"uuid": "7c63f857-0f90-4b5b-bea7-5d383edbff55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3ms6rwxvxbz2u", "content": "N-able disclosed a critical vulnerability (CVE-2026-18577) in its N-central RMM platform, allowing unauthenticated attackers to gain full administrative access. This affects all supported versions and is actively exploited. A hotfix (2026.3.1.7) was released on August 2, urging immediate upgrades.", "creation_timestamp": "2026-08-03T15:13:10.698498Z"}, {"uuid": "5fd4f0a3-9592-4ed4-b0af-9daec5157c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vyizska2s", "content": "CVE-2026-18577 is being exploited in the wild for N-central account takeover. An incomplete patch let attackers gain admin access. Update to 2026.3.1.7.\n\n#Nable #Ncentral #CVE202618577 #AccountTakeover #RMM #CyberSecurity", "creation_timestamp": "2026-08-03T16:25:51.417101Z"}, {"uuid": "678cf9e7-68e7-451e-9030-bab9b2042e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3ms6xybpjh52q", "content": "N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers.", "creation_timestamp": "2026-08-03T17:01:16.924281Z"}, {"uuid": "eea101ac-04c4-452f-8694-ca74824d8b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ms6ydvads62b", "content": "N-able\u3001\u5b9f\u969b\u306b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bN-central\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3092\u8b66\u544a\n\nN-able\u306f\u3001\u30db\u30b9\u30c8\u578b\u3068\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3059\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027(CVE-2026-18577)\u304c\u3001\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u9867\u5ba2\u306b\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u540c\u793e\u306f\u65e5\u66dc\u65e5\u3001\u3053\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u30db\u30c3\u30c8\u30d5\u30a3\u30c3\u30af\u30b92026.3.1.7\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f2026.3\u3088\u308a\u524d\u306e\u3059\u3079...", "creation_timestamp": "2026-08-03T17:07:46.104816Z"}, {"uuid": "7c20d7c5-ed09-49a2-b7ce-4e80d89568fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms6zmsjwil23", "content": "\ud83d\udea8 Breaking: N-able warns of N-central auth bypass flaw exploited in attacks\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\n\ud83d\udd17 https://hnow.live/a/c2a1beae", "creation_timestamp": "2026-08-03T17:30:39.000159Z"}, {"uuid": "33ee3693-f720-4824-8f14-78bbc0a7c1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032836649829655", "content": "It is possible to see elevated activities targeting N-able N-central (CVE-2026-18577) https://vuldb.com/vuln/385422/cti", "creation_timestamp": "2026-08-03T17:49:28.231077Z"}, {"uuid": "be22de9a-9426-4182-aee7-c02c20c58b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-03T18:00:04.177241Z"}, {"uuid": "66946c1c-2393-401e-9063-4e230072440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T18:00:05.338172Z"}, {"uuid": "26102602-445a-486a-84c9-0eb2308f77e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3ms77q5isht2b", "content": "\ud83d\uded1 CVE-2026-18577\nN-able N-central\nCVSS 8.2 / EPSS 1% / KEV: No\nTL;DR: An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeov\u2026\nhttps://cvesentinel.com/report/CVE-2026-18577?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-03T19:19:53.428512Z"}, {"uuid": "cd9dd0e8-0035-489f-95ef-5f537114a1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7bjrt6mo24", "content": "N-central\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\uff08CVE-2026-18577\uff09\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u5229\u7528\u3057\u3001\u30db\u30b9\u30c8\u578b\u30fb\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u53cc\u65b9\u306eN-central\u30b5\u30fc\u30d0\u30fc\u306b\u5f71\u97ff\u3002", "creation_timestamp": "2026-08-03T19:52:07.667067Z"}, {"uuid": "0e65b8cd-a17f-4ae1-86ff-ddcc178391b2", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a013613c-01b8-42e9-ab38-5ae39e63141e", "content": "", "creation_timestamp": "2026-08-03T20:00:02.408785Z"}, {"uuid": "7adf1075-6b45-410c-ba8d-cbe8daf721cd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ce14e1c-ac05-49ca-81bc-1978117d0c8b", "content": "", "creation_timestamp": "2026-08-03T20:00:22.358636Z"}, {"uuid": "1a2fcc21-bac5-42cb-a639-860f1acfda34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/morningnode.bsky.social/post/3ms7cgrwivy2u", "content": "N-able on-prem N-central customers need to manually install hotfix 2026.3.1.7 after active exploitation of CVE-2026-18577. Verify patching and review the published indicators of\u2026\nhttps://themorningnode.com/news/aGIkbGyFHEEW7sRwnxaV9?utm_source=bluesky&utm_medium=social&utm_campaign=the-morning-node", "creation_timestamp": "2026-08-03T20:08:20.530350Z"}, {"uuid": "ebeeef60-4fbd-4eba-a75b-6b7c39de8632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms7dovmmkt2u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-18577 N-able N-central\u2026\n\n\ud83d\udd17 https://hnow.live/a/dd8d41da", "creation_timestamp": "2026-08-03T20:30:47.312509Z"}, {"uuid": "5e8753ec-34a1-4560-bc30-99a31e6e523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3ms7euvqoup2d", "content": "\ud83e\udd16 CVE-2026-18577: auth bypass in N-able N-central actively exploited. Incomplete fix for CVE-2026-18576; both allow admin takeover. Hotfix 2026.3.1.7 out, on-prem must patch.\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-03T20:52:01.979837Z"}, {"uuid": "2100b513-a924-4a6d-a1ce-c72c41071575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3ms7fdni2t32t", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)\n\n\u26a0\ufe0f CVE-2026-18577 - N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-03T21:00:16.454458Z"}, {"uuid": "5c7f9c33-fb3d-443a-8f00-94b62c3f8335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/isuvo.bsky.social/post/3ms7ioolvm523", "content": "Dissecting the CVE-2026-18577 patch bypass in N\n\nhttps://ixuvo.com/blog/unauthenticated-god-mode-bypassing-patch-n-central-rmm-cve-2026-18577", "creation_timestamp": "2026-08-03T22:00:08.310413Z"}, {"uuid": "2b71a6d7-caac-4df0-8195-831005aec999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3ms7ipsttjk2m", "content": "Attackers Exploit N-able Patch Bypass Flaw on RMM Servers\nOver the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.\n\n\ud83d\udd17 https://hnow.live/a/c6000199", "creation_timestamp": "2026-08-03T22:00:46.385738Z"}, {"uuid": "3509e5c5-1a12-4ef4-9729-44b2c04dc667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3ms7j3nxn4c24", "content": "ALERT: Active exploitation verified for CVE-2026-18577 in N-able N-central. Unauthenticated attackers can execute account takeovers via alternate path manipulation. Access our complete threat breakdown, SPL/KQL detection logic, and hardening guidance here:\u2026", "creation_timestamp": "2026-08-03T22:07:24.302331Z"}, {"uuid": "6b863ecf-4cc1-4ad3-9c24-05f0d278984b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3ms7n26a2um26", "content": "URGENT C-SUITE BRIEF: Active exploitation verified on CISA KEV for CVE-2026-18577 (N-able N-central). Executive leadership must oversee immediate patch deployment, supply chain auditing, and trust model revalidation to safeguard organizational assets. Full strategic analysis:\u2026", "creation_timestamp": "2026-08-03T23:18:09.094450Z"}, {"uuid": "100b81e8-73b2-4881-b1ab-cd6d7cbfa58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "Telegram/yAT_yEL7XVUmNeoyZNwrLquQjtOdx7ZfQOWqQfXr8ZACTw", "content": "", "creation_timestamp": "2026-08-04T00:00:29.274806Z"}, {"uuid": "f352e4cb-f6cc-4b14-8d73-7de1b5ebba56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/HackerNewscyber/3311", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 N-able N-central\n\n\ud83c\udfa5\u0634\u0631\u06a9\u062a N-able \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 N-central \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-18577 \u062b\u0628\u062a \u0634\u062f\u0647\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0646\u0633\u0648\u0644 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\ud83c\udfa5\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Huntress\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0646\u0641\u0648\u0630 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u00abTake Control\u00bb \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0632 \u062c\u0645\u0644\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc \u062f\u0627\u0645\u0646\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc Cloudflare \u062d\u0636\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0647\u0631 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f\u060c \u0627\u06cc\u0646 \u062e\u0637\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0632\u0646\u062c\u06cc\u0631\u0647 \u062a\u0623\u0645\u06cc\u0646 \u0627\u0631\u0627\u0626\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u062e\u062f\u0645\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 (MSP) \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0647\u062f\u06cc\u062f \u06a9\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-04T00:00:39.750998Z"}, {"uuid": "9cbdc771-e8e5-4ee6-9d13-b71fe3a9102c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/information_security_channel/55668", "content": "N\u2011able Patches Vulnerability Exploited to Hack N-central Servers\nhttps://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/\n\nThe N\u2011central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.\nThe post N\u2011able Patches Vulnerability Exploited to Hack N-central Servers (https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-04T00:00:35.437785Z"}, {"uuid": "498cec77-da21-4a7a-a34a-def2b2d3c95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msb324n5vk2b", "content": "Kritieke kwetsbaarheid in N-able N-central stelt aanvallers in staat tot systeem\n\nEen ernstige beveiligingskwetsbaarheid, bekend als CVE-2026-18577, is ontdekt in het N-able N-central platform, een tool die door managed service providers (MSP's) wordt gebruikt voor extern beheer en monitorin...", "creation_timestamp": "2026-08-04T13:01:19.047629Z"}, {"uuid": "002cc851-1f02-4090-a838-ae7a85d3d3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3ms7rwadug724", "content": "N-able says CVE-2026-18577 is being actively exploited in N-central hosted and on-prem servers before 2026.3. Hotfix 2026.3.1.7 is available for the auth bypass flaw. #Ncentral #CVE202618577 #Nable", "creation_timestamp": "2026-08-04T00:45:25.951432Z"}, {"uuid": "bb0d6107-d32c-46a2-bdb0-8b0d34d2f7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/BleepingComputer/25248", "content": "\u200aN-able warns of N-central auth bypass flaw exploited in attacks\n\nN-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-04T01:00:12.309643Z"}, {"uuid": "be3b9d1b-f02a-46e8-bf89-2e2172aa9f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-04T01:00:33.828982Z"}, {"uuid": "816d742e-8986-4b26-9ee5-1e57b75d732a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html", "content": "N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.\n\nIts first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.\n\nN-central is the remote monitoring and management platform", "creation_timestamp": "2026-08-04T01:00:33.526866Z"}, {"uuid": "7913f722-a9e5-4486-94e0-b67a50cd02b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/attackers-exploit-n-able-patch-bypass-flaw", "content": "Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.", "creation_timestamp": "2026-08-04T01:00:35.315862Z"}, {"uuid": "e8ec1b53-554e-41e0-821d-199666c044e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msb462yury2s", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-18577](https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_20...\nhttps://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-04T13:21:25.571539Z"}, {"uuid": "acbf55d1-6b55-403a-9e2e-a1cf3b872465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msb47v56zl27", "content": "CVE-2026-18577 \u00b7 trending #8\n\nCurrently trending CVE - Hype Score: 3 - An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18577", "creation_timestamp": "2026-08-04T13:22:30.286827Z"}, {"uuid": "64464309-d06b-4c89-9114-207473e4ffc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3msb4wfjos42h", "content": "Fresh exploitation signal\n\nCISA added N-central CVE-2026-18577 to KEV on evidence of active exploitation. N-able says instances below 2026.3.1 need the 2026.3.1.7 hotfix.", "creation_timestamp": "2026-08-04T13:35:01.536816Z"}, {"uuid": "c3197585-2424-4728-bcdf-901258306ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "published-proof-of-concept", "source": "Telegram/GMbxxZ0cu7FgkFldz0u81QH5ac9fGj43iJQuczkDRXYsUrg", "content": "", "creation_timestamp": "2026-08-05T00:00:45.225685Z"}, {"uuid": "8de55c66-a144-46ee-8392-b0ddb562d65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/thehackernews/9699", "content": "\u26a0\ufe0f N-central attacks are reaching managed endpoints.\n\nAttackers are exploiting CVE-2026-18577 to bypass authentication, gain admin access, and abuse Take Control for lateral movement. N-able confirms limited customer compromises, and CISA has added the flaw to KEV.\n\nWhat defenders need to check: https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "creation_timestamp": "2026-08-05T00:00:51.110889Z"}, {"uuid": "b1ca9856-79fc-49b7-ad31-bba34ef4adc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mscaebatex2g", "content": "\ud83d\udea8 CISA KEV [CVSS 8.1 \u00b7 HIGH]\nCVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild\n\nhttps://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-08-05T00:09:07.580436Z"}, {"uuid": "7dff5b56-9534-4f1a-8529-3fdf7a579287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.acn.gov.it/portale/w/n-able-rilevato-sfruttamento-attivo-in-rete-della-cve-2026-18577", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-18577 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in N-able N-central, piattaforma avanzata di Remote Monitoring and Management (RMM) progettata con l\u2019obiettivo di gestire, proteggere e automatizzare infrastrutture IT complesse su larga scala. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-05T01:00:33.803295Z"}, {"uuid": "52a0332d-6301-4b81-b5e0-7d80e18b29ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows", "creation_timestamp": "2026-08-05T01:00:33.583053Z"}, {"uuid": "e5d8a178-61c8-4a3d-93c3-134352b50e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/qubblelabs.com/post/3mscdxaekfk2g", "content": "N-able RMM auth bypass CVE-2026-18577 hands attackers admin on the control plane per Dark Reading. Agents run as SYSTEM on every managed endpoint. The management console isn't software \u2014 it's the trust anchor for thousands of downstream networks.", "creation_timestamp": "2026-08-05T01:13:25.728352Z"}, {"uuid": "f9b7df10-d2b0-4001-b24e-7436fd05b003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mscgx7wo5c2c", "content": "\ud83d\udccc CVE-2026-18577 - An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 https://www.cyberhub.blog/cves/CVE-2026-18577", "creation_timestamp": "2026-08-05T02:07:06.502341Z"}, {"uuid": "2b492a0d-b2f8-4493-8e3a-50eaa3e140c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3msjjgf62dk2f", "content": "While Microsoft has not confirmed the vulnerability targeted by Storm-1175 in this campaign, the threat actor is likely exploiting the CVE-2026-18577 authentication bypass vulnerability in N-able, which was disclosed on August 2, 2026 and added to the CISA KEV catalog on August 3, 2026.", "creation_timestamp": "2026-08-07T21:42:14.759423Z"}, {"uuid": "6f57cfef-d6de-4302-892e-73495870a88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3msjjggbh5k2f", "content": "While Microsoft has not confirmed the vulnerability targeted by Storm-1175 in this campaign, the threat actor is likely exploiting the CVE-2026-18577 authentication bypass vulnerability in N-able, which was disclosed on August 2, 2026 and added to the CISA KEV catalog on August 3, 2026.", "creation_timestamp": "2026-08-07T21:46:36.677105Z"}, {"uuid": "cec6e8bc-6ef0-4f09-af9e-35ba1a562029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3msjjggbi4s2f", "content": "While Microsoft has not confirmed the vulnerability targeted by Storm-1175 in this campaign, the threat actor is likely exploiting the CVE-2026-18577 authentication bypass vulnerability in N-able, which was disclosed on August 2, 2026 and added to the CISA KEV catalog on August 3, 2026.", "creation_timestamp": "2026-08-07T21:46:37.193040Z"}, {"uuid": "ccfd8ed2-ca81-44ac-b668-ae7fbc5ff093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mscm5f4pqn22", "content": "CVE-2026-18577 in N-able N-central: an auth bypass that hands attackers full control of MSP environments.\n\nYou can lock down every Next.js route and Supabase RLS policy \u2014 if your management plane has no auth, none of it matters.", "creation_timestamp": "2026-08-05T03:40:01.845735Z"}, {"uuid": "c2148b8f-9334-4491-9da3-03378a428393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3msubmqy6e72d", "content": "N-able N-central: \u0434\u0432\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0430 \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2026-18577\n\n\n\nhttps://kripta.biz/posts/1D84A8E7-EB59-4844-A7F2-CB1B15D40929", "creation_timestamp": "2026-08-12T04:19:44.429699Z"}, {"uuid": "dda9810e-736b-4388-a63b-4d8e5f0edafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mscpueke5k2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-18577: 32 interactions\nCVE-2026-58048: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58048: 15 interactions\nCVE-2026-18574: 8 interactions\nCVE-2026-15307: 6 interactions\n", "creation_timestamp": "2026-08-05T04:46:34.842350Z"}, {"uuid": "790eda0c-40c9-4787-bcd2-9243dc2a5918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/bbx9K9urUvLk9j7eRGPtX22H_KZReCaTNQIGDAxVzdKgmeI", "content": "", "creation_timestamp": "2026-08-08T00:08:31.648619Z"}, {"uuid": "3b79a80e-52ab-4b64-839b-36c957798fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-08T01:00:33.534150Z"}, {"uuid": "3ddef335-480f-4417-b211-334a965c0352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msumgyg6iw24", "content": "\ud83d\udcf0 StormEncryptor, Ransomware Baru yang Digunakan Mantan Afiliasi Medusa\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/stormencryptor-ransomware-former-medusa-affiliate/\n\n#cve-2026-18577 #cyberAttack #cybersecurity #dataBreach #keamananSiber #medusa #n-able #n-central #ranso", "creation_timestamp": "2026-08-12T07:33:19.917284Z"}, {"uuid": "a5794cd1-7ba9-4194-a01e-0c6b4375135d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msk3yaxz7s2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 42 interactions\nCVE-2026-64564: 21 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-64564: 20 interactions\nCVE-2026-63077: 5 interactions\nCVE-2026-64561: 4 interactions\n", "creation_timestamp": "2026-08-08T03:12:07.703983Z"}, {"uuid": "c9f29cdf-31e7-4cbc-afe7-efe72df71f0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-12T08:00:04.172850Z"}, {"uuid": "859e3126-8caa-4ade-994e-96e6176e1705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msda5npuph2r", "content": "\ud83d\udea8 Your RMM tool is now the attacker's foothold.\n\nCISA added CVE-2026-18577 to KEV after real customer compromises.\n\nhttps://www.yazoul.net/news/article/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromises/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-05T09:38:06.008678Z"}, {"uuid": "50444614-4a28-489a-8c34-766dedcd517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mskk5nkb532x", "content": "N-able issues critical N-central patch for CVE-2026-18577; immediate update urged. #Nable #Ncentral #CyberSecurity #Vulnerability #PatchManagement #RMM #CVE202618577 https://thedailytechfeed.com/n-able-patches-n-central-vulnerability-exploited-by-attackers/", "creation_timestamp": "2026-08-08T07:25:42.031723Z"}, {"uuid": "a02ee014-40f6-43aa-86a6-4724b1aa6027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mskks75ktd2z", "content": "\u26a0\ufe0f N-central auth bypass exploited in attacks\n\nCVE-2026-18577 enables admin takeover; N-able issued an urgent hotfix.\n\ud83d\udd17 read more: www.bleepingcomputer...\n\n#ransomNews #cybersecurity\n", "creation_timestamp": "2026-08-08T07:37:20.679885Z"}, {"uuid": "402ac376-601f-47b1-9de2-4fe7089deb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mskmbj4tfu2v", "content": "N-able released Ncentral Hotfix 2 to address active exploitation of CVE-2026-18577, requiring updates to protect customers and managed systems.\n", "creation_timestamp": "2026-08-08T08:03:38.857363Z"}, {"uuid": "06a49c28-96b9-4bc4-81fb-adfbb73e9bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msdi4p7d5v26", "content": "An incomplete patch is worse than no patch.\n\nCVE-2026-18577.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-18577-n-central-auth-bypass-exploited-in-the-wild/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-05T12:00:43.472523Z"}, {"uuid": "4341c60c-9f19-4a1e-b927-3bf0799ecc8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-21T23:00:06.847910Z"}, {"uuid": "fba4d3b7-7911-4393-8f9b-420615467ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msla7n5elp2h", "content": "CVE-2026-18577 is trending. Hype score 4, currently #7 on cvemon.\n\nAn incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18577", "creation_timestamp": "2026-08-08T14:02:39.250800Z"}, {"uuid": "b3dfc539-9123-439b-affc-60a6fcb4413b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msm5xxvocx2u", "content": "\ud83e\udd16 CVE-2026-18577 (CVSS 8.2): auth bypass in N-able N-central, actively exploited. Attackers take admin, use Take Control to reach managed systems, persist via Cloudflare Tunnel. Hotfix 2 out; update to 2026.3.1.10.\nhttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.html", "creation_timestamp": "2026-08-08T22:53:05.265120Z"}, {"uuid": "edeb9f0d-b25e-4ac4-81f2-f7e058229f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msmmu4g67x27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 45 interactions\nCVE-2026-64564: 21 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2015-6609: 14 interactions\nCVE-2026-64638: 9 interactions\nCVE-2026-66066: 7 interactions\n", "creation_timestamp": "2026-08-09T03:19:22.040217Z"}, {"uuid": "6eece5d1-af66-4d35-9225-822ff9ddd443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-21T23:00:07.252178Z"}, {"uuid": "339ca0ab-ca79-415d-a63c-57c3b02afdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msegndf2zr26", "content": "CISA Orders 3-Day Patch Deadline for CVE-2026-18577 in N-able N-central", "creation_timestamp": "2026-08-05T21:06:54.587613Z"}, {"uuid": "9d02faf7-1628-44ce-9553-323aed87478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-21", "content": "", "creation_timestamp": "2026-08-09T08:45:04.597019Z"}, {"uuid": "dd581d64-bf4d-4705-be24-edfa3e40b522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3msndtmvaqa2h", "content": "CVE-2026-18577 in N-able $NABL N-central: auth bypass, CVSS 8.2, being actively exploited. Added to CISA KEV. One MSP server compromise can cascade to every downstream client. N-central is how MSPs run client networks.", "creation_timestamp": "2026-08-09T10:10:41.991948Z"}, {"uuid": "2eb1f505-ad27-48f6-be5b-a66999bf4001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3msoc3aqlel2z", "content": "CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild\n\n", "creation_timestamp": "2026-08-09T19:11:49.596409Z"}, {"uuid": "59250c60-9572-4316-b830-5c6020fe4fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mthdd6fcux2o", "content": "CVE-2026-18577, an auth bypass in N-able $NABL N-central, is under active exploitation. Attackers breaching the platform IT providers use to remotely manage client networks can pivot into clients via N-central's own Take Control feature. Huntress traced one breach to nine client orgs.", "creation_timestamp": "2026-08-19T18:10:42.671564Z"}, {"uuid": "35223e64-eb9e-4521-9831-ae2e2ab4884d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msp5uswgt52v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 45 interactions\nCVE-2026-64564: 28 interactions\nCVE-2026-64638: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-64564: 7 interactions\nCVE-2026-64638: 7 interactions\nCVE-2023-32243: 4 interactions\n", "creation_timestamp": "2026-08-10T03:29:18.499474Z"}, {"uuid": "a6282c1f-2fc8-4f41-945d-6004b3dff764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msfaf427pp2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 37 interactions\nCVE-2026-66066: 36 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 5 interactions\nCVE-2026-54876: 4 interactions\nCVE-2026-12943: 3 interactions\n", "creation_timestamp": "2026-08-06T04:47:35.130831Z"}, {"uuid": "443119cf-e972-45a8-9ee0-1a156011f6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-13T00:00:44.572409Z"}, {"uuid": "90af6b1a-3a45-4a21-a1be-28bed8535ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mspzbtofic2e", "content": "N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/08/10/c...\n\n#cybersecurity #cybersecuritynews #MSP #remotemanagement", "creation_timestamp": "2026-08-10T11:39:48.656341Z"}, {"uuid": "13759d0d-8e4b-408f-8883-03e7105666f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3msq2glaumo2l", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-18577, CVE-2026-66066, CVE-2026-63077, CVE-2026-20200, CVE-2026-58048\nActors: Apt, Ransomware, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-08-10T12:00:19.471243Z"}, {"uuid": "36318507-c0e1-455c-ba4d-e88a04fdb442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msqa7e3a7y2g", "content": "N-able confirmed that attackers exploited the N-central zero-day vulnerability (CVE-2026-18577), gaining administrative access to customer networks. A second mandatory hotfix (version 2026.3.1.10) was released, superseding the first, and must be installed immediately.", "creation_timestamp": "2026-08-10T13:43:40.414240Z"}, {"uuid": "abb80674-ffed-4d8b-91c2-9fcbc11fcdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:33.353585Z"}, {"uuid": "088fc7ec-57af-44a8-b19c-da9344e5bb58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msfyqyky7z2n", "content": "N-able N-central is under active attack. Authentication bypass. Customers already compromised. CISA added it to KEV.\n\nCVE-2026-18577.\n\nhttps://www.yazoul.net/news/article/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromises/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-06T12:03:43.968106Z"}, {"uuid": "ac00791f-6f7e-4668-9c89-4d95d1892b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-22T00:00:10.500072Z"}, {"uuid": "452a7597-4ea4-4af4-8655-8c5808309f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3msfzrsmgds23", "content": " N-able N-central (RMM MSP/IT): auth bypass in sfruttamento attivo. CVE-2026-18556 patchata in 2026.2, bypassata da CVE-2026-18577 \u2014 entrambe ora in CISA KEV. Hotfix 2026.3.1.7 obbligatorio. #infosec", "creation_timestamp": "2026-08-06T12:22:05.261306Z"}, {"uuid": "de8e4b67-1388-432f-9094-fe98f1016bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3msqloo3ejs2j", "content": "N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 - Help Net Security www.helpnetsecurity.com/2026/08/10/c...", "creation_timestamp": "2026-08-10T17:09:14.664400Z"}, {"uuid": "0bc9763d-86a5-4f46-941d-7735435f1757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3msqlsurjpf2i", "content": "China-linked group Storm-1175 has gracefully upgraded to a shiny new ransomware called StormEncryptor, proving once again that attackers work far faster than our patching schedules. The intruders allegedly waltzed into target networks by exploiting CVE-2026-18577, a delightful au...\n\nRead full story", "creation_timestamp": "2026-08-10T17:11:25.651718Z"}, {"uuid": "4b33a1cb-2c30-47ed-9a77-3201285c6824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-22T00:00:10.837661Z"}, {"uuid": "4ec879e0-7efb-4c4c-ab1c-2bab0c30fcc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/thehackernews/9764", "content": "\ud83d\udea8 China-linked Storm-1175 deploys previously undocumented StormEncryptor ransomware.\n\nMicrosoft says the group has shifted from Medusa and likely used N-able N-central CVE-2026-18577 for initial access. Storm-1175 has been observed moving from initial access to data exfiltration and ransomware deployment within days.\n\nInside the campaign \u2192 https://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html", "creation_timestamp": "2026-08-10T18:00:04.156721Z"}, {"uuid": "8b45c43a-fee9-47ea-a68d-9215b65fcfcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3msqood4wmr22", "content": "Storm-1175 deployed StormEncryptor ransomware, likely using N-able Ncentral CVE-2026-18577 to bypass patches and gain access, then encrypt files and drop a ransom note.\n", "creation_timestamp": "2026-08-10T18:02:34.717873Z"}, {"uuid": "6480fde3-5fc5-4a67-bf93-b947b9aede8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msqqyvwsn42y", "content": "Microsoft ties new StormEncryptor ransomware to China-linked Storm-1175, which breaks in via an N-able N-central auth bypass (CVE-2026-18577).\n\nOne management console breach reaches every downstream client.\n\nPatch to 2026.3.1.7, then hunt.", "creation_timestamp": "2026-08-10T18:44:17.218063Z"}, {"uuid": "3ee9ca5b-d389-4c1f-9820-de55d9c0a202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msqtkuhxdb2y", "content": "\ud83d\udce2 Storm-1175 d\u00e9ploie StormEncryptor, un nouveau ransomware exploitant CVE-2026-18577\n\n\ud83d\udcf0 Source : GBHackers / Microsoft Threat Intelligence \u2014 Date de publication : 8 ao\u00fbt 2026 \ud83c\udfaf Contexte g\u00e9n\u00e9ral Microsoft Threat Intelligence\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Storm1175 #StormEncryptor #Cyberveille", "creation_timestamp": "2026-08-10T19:30:06.626298Z"}, {"uuid": "9fd17a61-eca2-4b23-89b8-5ab07ba67aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/thehackernews/9764", "content": "\ud83d\udea8 China-linked Storm-1175 deploys previously undocumented StormEncryptor ransomware.\n\nMicrosoft says the group has shifted from Medusa and likely used N-able N-central CVE-2026-18577 for initial access. Storm-1175 has been observed moving from initial access to data exfiltration and ransomware deployment within days.\n\nInside the campaign \u2192 https://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html", "creation_timestamp": "2026-08-11T00:00:07.371593Z"}, {"uuid": "388d2fd0-180e-4887-a470-5df12c665024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msrwpi4hc22u", "content": "N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577\n\nTo help customers fend off ongoing attacks, N-able released a second security hotfix for N\u2011central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). \u201cHotfix\u2026\n#hackernews #news", "creation_timestamp": "2026-08-11T05:59:03.355390Z"}, {"uuid": "f6fdeb95-0ab5-4c48-9b94-229e3141367b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mss4nnf3ls27", "content": "Former Medusa affiliate Storm-1175 is deploying StormEncryptor ransomware, likely after exploiting CVE-2026-18577 in N-central. It appends .encrypted and drops !!!README_FIRST!!!.txt, demanding payment in 3 days. #StormEncryptor #Ncentral #Medusa", "creation_timestamp": "2026-08-11T07:45:24.343433Z"}, {"uuid": "5e8ceca6-4f73-4f97-bb47-4c419e079552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msrnwhptkf2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-64564: 28 interactions\nCVE-2026-64638: 18 interactions\nCVE-2026-18577: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2021-34501: 2 interactions\nCVE-2026-19433: 2 interactions\nCVE-2026-65545: 2 interactions\n", "creation_timestamp": "2026-08-11T03:21:54.010744Z"}, {"uuid": "235f6f08-7dff-40e6-9346-3ad3fef3cb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/117076529266014221", "content": "La innovadora botnet Aeternum usa blockchain para evadir detecci\u00f3n, mientras c\u00e1maras IP ucranianas y drones militares sufren infiltraciones que exponen datos sensibles; una vulnerabilidad cr\u00edtica en KVM permite escalada de privilegios y ataques a plugins de WordPress generan accesos administrativos falsos; adem\u00e1s, ransomware de origen chino amenaza sistemas empresariales. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff11/08/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd10 AN\u00c1LISIS DE LA AMENAZA PERMANENTE: BOTNET AETERNUM USANDO BLOCKCHAIN\nLa botnet Aeternum representa un riesgo avanzado al utilizar contratos inteligentes en la blockchain Polygon para establecer una infraestructura descentralizada de comando y control (C2). Esta arquitectura evita la detecci\u00f3n tradicional y facilita la ejecuci\u00f3n de cargas maliciosas. Conocer esta t\u00e9cnica innovadora es esencial para reforzar las defensas contra amenazas persistentes modernas. Descubre el an\u00e1lisis completo y c\u00f3mo proteger tus sistemas aqu\u00ed \ud83d\udc49 https://djar.co/tLv9vV\n\ud83c\udfa5 EXPLOITACI\u00d3N DE C\u00c1MARAS IP UCRANIANAS POR OPERADOR DE HABLA RUSA\nSe ha revelado un directorio abierto que expone las herramientas usadas para comprometer c\u00e1maras IP en Ucrania, adem\u00e1s de intentos de acceso a sitios gubernamentales y militares. Este caso destaca los riesgos reales en dispositivos IoT y la importancia cr\u00edtica de proteger infraestructuras sensibles ante actores sofisticados. Inf\u00f3rmate sobre las t\u00e1cticas y medidas preventivas recomendadas aqu\u00ed \ud83d\udc49 https://djar.co/Qd0A\n\u26a0\ufe0f CVE-2026-64561: ESCAPE DE INVITADOS KVM CON PRIVILEGIOS ROOT EN LINUX\nUna vulnerabilidad cr\u00edtica permite a usuarios invitados de m\u00e1quinas virtuales KVM escapar al host Linux con privilegios root, comprometiendo la seguridad del sistema completo. Este fallo subraya la urgencia de aplicar parches y fortalecer configuraciones en entornos virtualizados para evitar accesos no autorizados de alto nivel. Lee el an\u00e1lisis t\u00e9cnico y recomendaciones aqu\u00ed \ud83d\udc49 https://djar.co/v9txO\n\ud83d\udee0\ufe0f ATAQUE A LA CADENA DE SUMINISTRO EN PLUGINS DE WORDPRESS BdThemes\nSe ha detectado la explotaci\u00f3n de paquetes JSON maliciosos en plugins de WordPress, permitiendo a atacantes crear usuarios administradores falsos y desplegar shells web PHP sin necesidad de actualizar los plugins. Esta vulnerabilidad de tipo XSS evidencia el peligro que representa no validar adecuadamente componentes de terceros y la necesidad de mantener actualizaciones constantes. Entiende c\u00f3mo mitigar este riesgo hoy mismo aqu\u00ed \ud83d\udc49 https://djar.co/3ib0TB\n\ud83d\ude81 VULNERABILIDADES EN DRONES MILITARES DE LA MARINA REAL: FILTRACI\u00d3N DE DATOS HACIA CHINA\nUn informe revela que drones de la Marina Real presentan fallas de seguridad que permiten la transmisi\u00f3n no autorizada de informaci\u00f3n sensible hacia China. Este incidente resalta la importancia de implementar controles robustos en sistemas militares y tecnol\u00f3gicos para proteger datos estrat\u00e9gicos. Accede al reporte completo y medidas recomendadas aqu\u00ed \ud83d\udc49 https://djar.co/DLBej8\n\ud83e\udda0 RANSOMWARE STORMENCRYPTOR DESPLEGADO POR HACKERS VINCULADOS A CHINA\nMicrosoft alerta que el grupo Storm-1175 utiliza el ransomware StormEncryptor, aprovechando la vulnerabilidad CVE-2026-18577 en N-able N-central para comprometer sistemas empresariales. Se recomienda la aplicaci\u00f3n inmediata de parches y monitoreo activo para evitar da\u00f1os severos por este ataque sofisticado. Profundiza en la investigaci\u00f3n y pautas de defensa aqu\u00ed \ud83d\udc49 https://djar.co/tV8x", "creation_timestamp": "2026-08-11T11:01:04.668336Z"}, {"uuid": "7ba87c00-afbe-42ad-8765-c5bb90a1a66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-176a-7b1a-5c06-7d5468047769", "content": "StormEncryptor: come l\u2019ex affiliato Medusa Storm-1175 ha trasformato N-central in un launchpad ransomware\n@informaticaMicrosoft attribuisce a Storm-1175, gruppo legato alla Cina e gi\u00e0 affiliato Medusa, lo sfruttamento della falla CVE-2026-18577 in N-able N-central per distribuire il nuovo ransomware StormEncryptor aRE: insicurezzadigitale.com/?p=133\u2026", "creation_timestamp": "2026-08-11T12:49:50.227709Z"}, {"uuid": "88f307f4-e39e-41c2-8947-ddddceb822a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mssnop3dtbv2", "content": "# **StormEncryptor: come l\u2019ex affiliato Medusa Storm-1175 ha trasformato N-central in un launchpad ransomware**\n\n\n@informatica\nMicrosoft attribuisce a Storm-1175, gruppo legato alla Cina e gi\u00e0 affiliato Medusa, lo sfruttamento della falla CVE-2026-18577 in N-able N-central per distribuire il [\u2026]", "creation_timestamp": "2026-08-11T12:50:16.749459Z"}, {"uuid": "4239921d-f461-4d9d-9c8c-8aaf2f5d8d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mtdrugluwk2r", "content": "N-central exige un segundo parche: la primera correcci\u00f3n no bast\u00f3\nquasa.io/es/media/n-c...\nFuentes: Quasa Media, El aviso de seguridad de N-able, La ficha de CVE-2026-18577 en Rapid7, La investigaci\u00f3n actualizada de Huntress / Escritor: Slava Vasipenok", "creation_timestamp": "2026-08-18T08:20:17.493111Z"}, {"uuid": "aa4053f3-917d-4e38-be2b-18803119faf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/xakep_ru/19860", "content": "N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0443\u0436\u0435 \u0434\u0432\u0430 \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 N-central\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f N-central. \u041f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-18577: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 N-central \u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nhttps://xakep.ru/2026/08/11/n-central-0day/", "creation_timestamp": "2026-08-11T19:00:05.365931Z"}, {"uuid": "57d7b861-3ffa-4611-9699-c81ef3621262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/true_secator/8486", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. TP-Link \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 (ZTP) \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Omada, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Vedere Labs \u0438\u0437 Forescout, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0448\u0438\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 Black Hat USA. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 15 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0438 \u0443\u0441\u043b\u0443\u0433\u0438 TP-Link, \u0432\u043a\u043b\u044e\u0447\u0430\u044f IP-\u043a\u0430\u043c\u0435\u0440\u044b, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IoT, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\n\n2. Oasis Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-41679 (CVSS 10) \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Paperclip, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\nPaperclip - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0418\u0418. \u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0431\u0435\u0437 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0447\u0442\u044b, \u0432\u0445\u043e\u0434\u0430 \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 \u0435\u0433\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f, \u0430 \u0437\u0430\u0442\u0435\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u043f\u0443\u0442\u0435\u043c \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043d\u043e\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d Paperclip.\n\n3. Zenity \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u0432\u0443\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 Claude \u0432 Chrome (\u043e\u0442\u0447\u0435\u0442) \u0438 ChatGPT Atlas (\u043e\u0442\u0447\u0435\u0442), \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432, \u043a\u0430\u043a \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u043d\u0430 Amazon.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u0445 \u0441\u0432\u043e\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 Anthropic \u0438 OpenAI \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0438 \u043d\u0430\u0447\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e.\n\n4. N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day (CVE-2026-18577), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0435\u0435 N-central. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0448\u043b\u0443\u044e \u043f\u044f\u0442\u043d\u0438\u0446\u0443. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b - \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u044b\u0439 \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b.\n\n5. \u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 QuickFox, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0441\u0442\u0443\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u044d\u043a\u0441\u043f\u0430\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u0433\u0440\u043e\u0432\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0441\u0430\u0439\u0442\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u041a\u0438\u0442\u0430\u044f. Fortinet \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c APT Twill Typhoon.\n\n6. \u0423\u0447\u0451\u043d\u044b\u0435 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041d\u044c\u044e-\u0425\u0435\u0439\u0432\u0435\u043d\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c HID-\u0444\u0430\u0439\u043b\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0414\u041d\u041a. \u0424\u0430\u0439\u043b\u044b \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u041f\u041e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0439. Thermo Fisher Scientific \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n7. \u0421\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0434\u043b\u044f 55 \u0432\u044b\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u0434 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b, \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0438\u043b\u0438 \u0436\u0435 PoC \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0432\u044b\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQLite \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10/10. \u0412\u0441\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0431\u044b\u043b\u0438 \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u044b.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 VulnCheck \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u00ab\u0437\u0430\u0432\u043e\u0434\u0441\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0435\u00bb ENDLESSDOORS, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u043e\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 20 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zbtlink.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e \u0432\u0441\u0435\u0445 21 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0442 Zbtlink, \u0437\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u0432\u0430 \u0433\u043e\u0434\u0430. \u0411\u044d\u043a\u0434\u043e\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u044b \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u044f\u0437\u044c \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 C2 \u043a\u0430\u0436\u0434\u044b\u0435 35 \u0441\u0435\u043a\u0443\u043d\u0434.", "creation_timestamp": "2026-08-07T01:00:04.878407Z"}, {"uuid": "8437d968-08d8-488a-8d31-07f3059fc3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mshox6qs5q26", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 41 interactions\nCVE-2026-58048: 16 interactions\nCVE-2026-15920: 9 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18556: 5 interactions\nCVE-2026-18577: 4 interactions\nCVE-2021-22681: 3 interactions\n", "creation_timestamp": "2026-08-07T04:13:33.751989Z"}, {"uuid": "50f495dc-2ab7-45b8-aead-791cf50ab621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3msi3mgegbz2h", "content": "CVE-2026-18577: auth bypass in N-able N-central (MSP RMM tool) actively exploited, bypasses an incomplete patch, CISA 3-day deadline. One compromised server = access to every client network the MSP manages. Patch now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/RLDra\n\ud83c\udde9\ud83c\uddea zurl.co/WX65N \n\n#CyberSecurity #MSP #RMM #ThirdPartyRisk #CISA", "creation_timestamp": "2026-08-07T08:00:12.265034Z"}, {"uuid": "dea2879e-d364-4427-b35a-989fb049744d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msydby42sr2r", "content": "\ud83d\udce2 CVE-2026-18577 : Bypass d'authentification N-able N-central exploit\u00e9 activement\n\nCet article analyse CVE-2026-18577, une vuln\u00e9rabilit\u00e9 de bypass d'authentification affectant la plateforme de Remote Monitoring and Management (RMM)\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#NAbleNCentral #RMM #Cyberveille", "creation_timestamp": "2026-08-13T19:00:07.359589Z"}, {"uuid": "2cb50dfb-7322-48ee-a0c9-b83a1ada8cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275", "content": "N-able heeft kwetsbaarheden verholpen in N-able N-central tot en met versie 2026.3.1. De kwetsbaarheden betreffen bypass van authenticatie in N-able N-central. In versies tot en met 2026.1 kan een aanvaller de authenticatiecontroles omzeilen door een alternatieve route binnen de applicatie te benutten.\n\nIn versies tot en met 2026.3.1 is een onvolledige patch voor de kwetsbaarheid met kenmerk CVE-2026-18556 ge\u00efntroduceerd die authenticatieomzeiling en overname van accounts mogelijk maakt. Dit issue heeft kenmerk CVE-2026-18577 toegewezen gekregen. Hierdoor kan een aanvaller ongeautoriseerd toegang krijgen tot gebruikersaccounts en het systeem controleren. Alle implementaties die de genoemde versies gebruiken, zijn kwetsbaar.\n\nN-able meldt dat misbruik van de kwetsbaarheid is ontdekt en hierop gebruikers heeft ge\u00efnformeerd.", "creation_timestamp": "2026-08-07T10:00:39.085098Z"}, {"uuid": "a022bb40-e260-44f3-a299-617668cdbcad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/jacobianeng.bsky.social/post/3msthp4ltuq2o", "content": "Two CVEs, one N-able N-central vulnerability. CISA added CVE-2026-18556 to KEV for an auth bypass, then added CVE-2026-18577 days later because the first patch didn't fully close it. MSPs running N-central: verify you're past both fixes, not the first one.", "creation_timestamp": "2026-08-11T20:35:44.754340Z"}, {"uuid": "72c2181b-516a-4ec9-8438-3161f9306935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "Telegram/bbx9K9urUvLk9j7eRGPtX22H_KZReCaTNQIGDAxVzdKgmeI", "content": "", "creation_timestamp": "2026-08-07T10:15:04.765440Z"}, {"uuid": "6a50de25-4229-4ff0-8c08-15e226a11257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3msihduddfb2f", "content": "N-able's N-central (before 2026.3.1.7) was exploited via CVE-2026-18577 for remote admin access. Updated fix released on Aug 2. Stay protected. #Cybersecurity", "creation_timestamp": "2026-08-07T11:30:09.058033Z"}, {"uuid": "81b2c05e-bfbd-40f1-98e9-ad509a3f0dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "exploited", "source": "https://t.me/xakep_ru/19860", "content": "N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0443\u0436\u0435 \u0434\u0432\u0430 \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 N-central\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f N-central. \u041f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-18577: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 N-central \u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nhttps://xakep.ru/2026/08/11/n-central-0day/", "creation_timestamp": "2026-08-12T00:00:07.547172Z"}, {"uuid": "ac80af7a-9013-4a10-af77-35cab82493d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msix5chrf324", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-18577", "creation_timestamp": "2026-08-07T16:14:59.933890Z"}, {"uuid": "7bee5874-d8e9-4ffe-9e7a-ff5f1237bc43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msixu3podw26", "content": "~Cybergcca~\nCanadian Cyber Centre warns of actively exploited N-able N-central CVEs and new Google Chrome vulnerabilities.\n-\nIOCs: CVE-2026-18577, CVE-2026-18556\n-\n#Chrome #Nable #ThreatIntel", "creation_timestamp": "2026-08-07T16:25:34.247524Z"}, {"uuid": "9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-23T00:00:45.846805Z"}, {"uuid": "f95db6e0-7340-4679-a55f-85470da6f489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-23T00:00:46.782807Z"}]}