EdgeProtect
Threat News
Latest cyber threat intelligence, breaches and exploitation
3 matching stories
Authentication BypassCISA KEV adds N-able N-central auth bypass CVE-2026-18556 with 3-day federal deadline
CISA added CVE-2026-18556, an authentication bypass in N-able N-central that allows unauthenticated administrative account takeover in versions through 2026.1, to its Known Exploited Vulnerabilities catalog on 4 August 2026, with a 7 August deadline for US federal civilian agencies.
Attackers Exploit SharePoint Authentication Bypass CVE-2026-55040 Following Public PoC Release
Attackers are using Rapid7's public proof of concept for CVE-2026-55040, a CVSS 9.1 SharePoint Server authentication bypass in JWT token validation that Microsoft patched on 14 July 2026. Honeypot operators reported attempts in August, with some recorded as early as 19 July, and CISA added the flaw to KEV on 18 August.
Attackers Exploit macOS Screen Sharing Authentication Bypass CVE-2026-65400 to Gain Root and Deploy Monero Miners
The flaw in macOS Screen Sharing allows network-based attackers to bypass authentication and obtain root access, with observed deployments of Monero crypto miners on compromised systems.
