Threat actors have taken advantage of a patch bypass vulnerability in the N‑able patching system to hack N-central servers. The vulnerability, identified as CVE-2026-18577, was discovered by researchers at a leading cybersecurity firm. The attackers exploited the vulnerability to gain unauthorized access to the servers, compromising sensitive data. The N‑able patching system is a widely used solution for IT administrators to manage and secure their networks.
N-central is a managed security service provider that offers a range of security solutions to businesses. The company's services are designed to help organizations protect themselves from cyber threats. The vulnerability was discovered through a combination of automated testing and manual analysis by researchers at the firm. The attackers used the vulnerability to gain access to the servers, allowing them to steal sensitive data and disrupt operations.
Researchers at the firm recommend that N-central users and customers take immediate action to patch their systems and apply the available security updates. N-central has also issued a statement acknowledging the vulnerability and urging its customers to take immediate action to secure their systems.