Exploited vulnerabilitiesBriefConfirmed by two or more outlets

N-able N-central auth bypass (CVE-2026-18577)

N-able N-central auth bypass (CVE-2026-18577)

Disclosed

Live scores

Live scores

CVE-2026-18577
EPSS
0.146
likely to be attacked soon
VEDAS
0.985
strong exploit evidence
On CISA KEV
Yes, since 2026-08-03
Detection rule
Nuclei · Suricata
EPSS (chance of attack)
100.1CVE-2026-18577 EPSS over time2026-082026-11-01
VEDAS (exploit evidence)
100.9CVE-2026-18577 VEDAS over time2026-082026-11-01

Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.