CVE-2026-18577 CISA KEV · Actively exploitedSuited to automated attack · CISA
Incomplete patch leads to administrative account takeover
CVSS score
8.2
EPSS probability
%14.6
Risk score
2.4
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: N-able N-central < 2026.3.1.10 - Authentication Bypass
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-86218 Actively exploited
Vulnerability in N Able N Central
N
Patch status unknown Public Exploits:7EPSS %13
8.2
CVE-2026-18556 Actively exploited
Unauthenticated administrative account takeover
N
WorkaroundEPSS %8
8.8
CVE-2025-8876 Actively exploited
Improper input validation in N Able N Central
N
Patch status unknown Public Exploits:1EPSS %3
7.8
CVE-2025-8875 Actively exploited
Deserialization of untrusted data in N Able N Central
N
Workaround Public Exploits:1EPSS %2
4.3
CVE-2025-68624
Vulnerability in N Able Mail Assure
N
Patch status unknownEPSS %0
6.9
CVE-2026-15580
PassPortal browser extension: vault token disclosure via unvalidated postMessage
N
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-18577"