CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild
2026-08-07T07:23:37Z•27bc0ec03bfba363d2cf224ea250fb65f1cb855adc5df9ae9863d028fee7f60f
CVE-2026-18556CVE-2026-18577CVE-2026-66066Active StorageN-able N-centralRMMRuby on Railsarbitrary file readauthentication bypassexploited in the wildlibvipsmanaged service providerspossible remote code executionremote unauthenticated attack
What happened
Rapid7 reports that CVE-2026-18577 is an authentication bypass in N-able N-central, exploited in the wild after an incomplete fix for CVE-2026-18556. Remote unauthenticated attackers can obtain administrative control of vulnerable N-central servers, creating significant downstream risk because N-central is an RMM platform with privileged access to managed environments. The feed also describes CVE-2026-66066, a critical arbitrary file-read vulnerability in Ruby on Rails Active Storage when using libvips with untrusted uploads; exposed secrets may enable remote code execution. Both issues are of
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 27bc0ec03bfba363d2cf224ea250fb65f1cb855adc5df9ae9863d028fee7f60f
- Enrichment time
- 2026-08-07T07:23:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.