Breach Record

N-able

DISCLOSED 2026-08-02 · UNPATCHED CVE

Attackers are actively exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) platform, to gain unauthorized access to managed endpoints. This allows attackers to potentially compromise all endpoints managed by the affected N-central instance, posing a significant supply-chain-like risk.

The record

What we know

Disclosed

2026-08-02

Attack vector

Unpatched Cve

Sources

Cited reporting

↗ helpnetsecurity.com (2026-08-03) ↗ thehackernews.com (2026-08-03) ↗ bleepingcomputer.com (2026-08-03) ↗ darkreading.com (2026-08-03) ↗ futurumgroup.com (2026-08-02)

Similar vector · recent

Other unpatched cve breaches on file

This page is the permanent ColdRecon entry for the N-able disclosure. It updates if new public reporting emerges. All tracked breaches →

N-able just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →