CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: yes — in CISA KEV since 2026-08-04
EPSS: 7.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-01 · updated 2026-10-23
Weakness: CWE-288

Description

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Affected products

N-able N-central: through 2026.1

References

https://uptime.n-able.com/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556
https://www.n-able.com/blog/n-central-security-update-august-2-2026

Get alerted when CVE-2026-18556 or the next vulnerability affects your stack