Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)

Cybercriminals are actively exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a popular remote monitoring and management tool used by managed service providers. This flaw enables attackers to gain unauthorized access to managed endpoints through compromised admin accounts and establish persistent access using a CloudFlare tunnel. N-able released a hotfix on August 2, 2026, but many users remain unpatched, according to threat intelligence firm Huntress. Organizations using self-hosted N-central servers should apply the fix immediately and inspect systems for signs of compromise.