CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild
2026-08-04T19:23:37Z•249ad1530a01d918f99db4f564d00adee1e93ed8d7f40a09e8309b721e5206f5
CVE-2026-18556CVE-2026-18577CVE-2026-66066Active-StorageN-able-N-centralRMMRuby-on-Railsarbitrary-file-readauthentication-bypasscritical-vulnerabilityexploited-in-the-wildlibvipsmanaged-service-providerspossible-remote-code-executionprivilege-escalationremote-unauthenticated
What happened
Rapid7 reports that CVE-2026-18577 is an authentication bypass in N-able N-central, exploited in the wild after an incomplete fix for CVE-2026-18556. Remote unauthenticated attackers can obtain administrative control of vulnerable N-central servers, creating significant downstream risk because N-central is an RMM platform with privileged access across managed environments. The document also covers CVE-2026-66066, a critical unauthenticated arbitrary file-read vulnerability in Ruby on Rails Active Storage when using libvips with untrusted uploads; exposed secrets may enable remote code-execu
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 249ad1530a01d918f99db4f564d00adee1e93ed8d7f40a09e8309b721e5206f5
- Enrichment time
- 2026-08-04T19:23:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.