CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild
2026-08-06T19:23:37Z•134bf1800c7bf54e6de977df2f8fec5d46aaa74dbdbd326b4122175ac45ef389
CVE-2026-18556CVE-2026-18577CVE-2026-66066Active StorageCWE-1188N-able N-centralRMMRuby on Railsarbitrary file readauthentication bypassexploited in the wildlibvipsmanaged service providersremote code executionremote unauthenticated
What happened
Rapid7 reports that CVE-2026-18577 is an authentication bypass in N-able N-central, exploited in the wild after an incomplete fix for CVE-2026-18556. Remote unauthenticated attackers can obtain administrative control of vulnerable N-central servers, creating significant downstream risk because N-central is an RMM platform with privileged access to managed environments. The feed also covers CVE-2026-66066, a critical arbitrary file-read vulnerability in Ruby on Rails Active Storage when using libvips with untrusted uploads; exposed secrets may enable remote code execution. Both issues require4?
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 134bf1800c7bf54e6de977df2f8fec5d46aaa74dbdbd326b4122175ac45ef389
- Enrichment time
- 2026-08-06T19:23:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.