CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

High severity, CVSS 7.4. Actively exploited: in CISA KEV since 2026-08-04. EPSS: 7.9% chance of exploitation in the next 30 days.

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Affected products

• N-able N-central: up to and including 2026.1

Published 2026-08-01. Last modified 2026-08-05.