Critical

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

The Hacker News

August 3, 2026 at 6:41 AM

Actively Exploited

Overview

N-able reported that attackers exploited an authentication bypass vulnerability in its N-central platform, allowing unauthorized remote administrative access to customer systems. This issue, tracked as CVE-2026-18577, affects all N-central builds prior to version 2026.3.1.7. The initial fix released by N-able was incomplete, leading to successful exploitation of the flaw. The company released the first unaffected version on August 2, 2023, which highlights the critical need for users to ensure they are running the latest version to protect their systems. Organizations using N-central should take immediate action to update to version 2026.3.1.7 or later to mitigate the risk of these attacks.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: N-central platform, affected versions prior to 2026.3.1.7
Action Required: Update to N-central version 2026.
Timeline: Disclosed on August 2, 2023

Original Article Summary

N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version. N-central is the remote monitoring and management platform

Impact

N-central platform, affected versions prior to 2026.3.1.7

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Disclosed on August 2, 2023

Remediation

Update to N-central version 2026.3.1.7 or later to remediate the vulnerability.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Vulnerability, Update, and 1 more.

Read Original Article

Related Coverage

From Fake Workers to Account Recovery: The Growing Identity Verification Risk

BleepingComputer

Attackers are shifting their focus from directly compromising login credentials to exploiting identity verification processes. This change in tactics poses significant risks, allowing bad actors to create fake identities or manipulate recovery procedures to gain unauthorized access. Organizations that rely on weak verification methods are particularly vulnerable to social engineering attacks, which can lead to data breaches and loss of sensitive information. Strengthening identity verification processes is essential to mitigate these risks and protect both employees and customers. Companies must adopt more robust methods to ensure that only legitimate users can access their systems, thereby reducing the chances of fraudulent activities.

Aug 25, 2026

INTERPOL crackdown on West African crime rings uncovers troubling new trend

Help Net Security

INTERPOL recently conducted an extensive operation called Jackal IV, targeting organized crime groups in West Africa. Over eight months, police in 22 countries arrested 58 individuals and identified 263 suspects linked to groups like Black Axe, known for their involvement in money laundering and other illicit activities. The operation aimed to disrupt these crime networks by seizing assets and facilitating arrests. This crackdown reveals a troubling trend of increasing organized crime activity in the region, which poses significant challenges for law enforcement and raises concerns about the broader impact on security and governance in West Africa. The collaboration across multiple countries underscores the need for a united front against such transnational crime.

Aug 25, 2026

WhatsApp adds stronger two-step verification, multiple passkeys

BleepingComputer

WhatsApp is enhancing its account security with the introduction of multiple passkeys and a more robust two-step verification process. These features aim to provide users with better protection against unauthorized access to their accounts. The update is part of WhatsApp's ongoing efforts to improve security, especially as the platform continues to grow in popularity. Users will benefit from these added layers of security, making it harder for attackers to compromise their accounts. This move is particularly important given the increasing number of phishing attempts and account takeovers targeting messaging apps.

Aug 25, 2026

First Malware Built Specifically for Car Head Units Fuels Botnet

SecurityWeek

Kaspersky researchers have identified a new type of malware specifically designed for car head units, which are the infotainment systems found in vehicles. This malware has been linked to the BadBox botnet, a network that has already compromised millions of devices. The malware's targeting of car systems raises significant concerns about the security of vehicle technology, as it could potentially allow attackers to control various functions of the car or access sensitive data. This incident emphasizes the growing vulnerability of modern vehicles to cyber threats, highlighting a need for stronger security measures in automotive technology. Car manufacturers and users alike should be aware of this emerging threat and take precautions to safeguard their systems.

Aug 25, 2026

Australia Warns of Active Exploitation of Critical TeamCity Server Flaw

Infosecurity Magazine

Australian officials are warning TeamCity users to address a critical vulnerability that is currently being exploited by attackers. This alert follows a similar warning from the US government, indicating that the flaw poses a significant risk to organizations using TeamCity. The vulnerability could allow unauthorized access or control over affected systems, making it crucial for users to take immediate action. By patching their servers, companies can protect themselves from potential breaches and data loss. With active exploitation confirmed, the urgency for a fix is clear, and organizations should prioritize this update to safeguard their operations.

Aug 25, 2026

Police arrests dozens of suspects in global cybercrime crackdown

BleepingComputer

In a significant global effort against cybercrime, law enforcement agencies from 22 countries collaborated to identify 263 suspects and arrest 58 individuals tied to criminal networks primarily based in Africa. This crackdown is part of a broader initiative to combat organized cybercrime, which has been a growing concern worldwide. The arrested suspects are believed to be involved in various cybercrimes, including fraud and identity theft, affecting numerous victims across different regions. By targeting these networks, authorities aim to disrupt the operations of these cybercriminals and protect potential victims from future attacks. This operation underscores the need for international collaboration in tackling cyber threats that span multiple borders.

Aug 25, 2026