EdgeProtect
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
N-Able N-CentralN-central auth bypass CVE-2026-18577 exploited; Microsoft links attacks to StormEncryptor actor
Attackers exploited CVE-2026-18577, an incomplete patch for the N-able N-central authentication bypass CVE-2026-18556, to take over N-central servers and reach managed endpoints. Microsoft believes the actor may be Storm-1175, which has switched from Medusa to a new ransomware strain, StormEncryptor.
CISA KEV adds N-able N-central auth bypass CVE-2026-18556 with 3-day federal deadline
CISA added CVE-2026-18556, an authentication bypass in N-able N-central that allows unauthenticated administrative account takeover in versions through 2026.1, to its Known Exploited Vulnerabilities catalog on 4 August 2026, with a 7 August deadline for US federal civilian agencies.
