{"id":"CVE-2026-18577","title":"An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1","summary":"An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1","severity":"none","cwe":["CWE-288"],"published":"2026-08-02","updated":"2026-08-02","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18577","references":[{"url":"https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm","label":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"},{"url":"https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/","label":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18556","label":"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"ingestedAt":"2026-08-02T23:20:14.359Z","epss":0.54068,"epssPercentile":0.98982,"kev":true,"exploited":true,"kevDateAdded":"2026-08-03","kevDueDate":"2026-08-06","kevRansomware":false,"zeroDay":true,"exploits":{"github":1,"githubRepos":["https://github.com/HORKimhab/CVE-2026-18577"],"nuclei":["CVE-2026-18577"],"checkedAt":"2026-09-21T15:28:16.059Z"},"exploitAvailable":true,"slug":"CVE-2026-18577","body":"## Overview\n\nAn incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":2.8,"likelihood":10.8,"exploitation":25,"ransomware":0},"changes":[{"seq":4979,"id":"CVE-2026-18577","ts":1788887223522,"field":"exploit_available","old":"false","new":"true"},{"seq":3862,"id":"CVE-2026-18577","ts":1788886355473,"field":"exploit_available","old":"true","new":"false"},{"seq":2690,"id":"CVE-2026-18577","ts":1788883020769,"field":"exploit_available","old":"false","new":"true"},{"seq":1719,"id":"CVE-2026-18577","ts":1788882425236,"field":"exploit_available","old":"true","new":"false"},{"seq":825,"id":"CVE-2026-18577","ts":1788881858646,"field":"exploit_available","old":"false","new":"true"},{"seq":198,"id":"CVE-2026-18577","ts":1787863387324,"field":"epss","old":"0.06153","new":"0.54068"},{"seq":106,"id":"CVE-2026-18577","ts":1785785556120,"field":"zero_day","old":"false","new":"true"},{"seq":105,"id":"CVE-2026-18577","ts":1785785556120,"field":"exploited","old":"false","new":"true"},{"seq":104,"id":"CVE-2026-18577","ts":1785785556120,"field":"kev","old":"false","new":"true"}]}