~/article/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromi-xoc68l

medium2026-08-04 07:00 UTCSource: The Hacker News

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

CVE-2026-18577 CVE-2026-18556

Topics

cve cisa

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromi-xoc68l

2026-10-02 17:02 UTC[high]

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

Referenced CVEs

Topics

This is what cymesh.net is for

Related

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Zammad GmbH Zammad Session Fixation Vulnerability