Daily Cybersecurity
Threat Intelligence

N-able warns of N-central auth bypass flaw exploited in attacks

N-able has issued a warning about an authentication bypass vulnerability, tracked as CVE-2026-18577, that is being exploited by hackers. The flaw impacts both hosted and on-premises N-central servers, urging administrators to take immediate mitigation steps.

N-able N-central exploitation results in RMM tool deployment

This Sophos Threat Research article describes how threat actors exploit CVE-2026-18577 to compromise N-able N-central servers. After gaining access, they deploy additional remote monitoring and management tools and establish network tunnels.

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco has disclosed an actively exploited high-severity vulnerability in ASA and FTD software. The flaw, CVE-2026-20349, allows an unauthenticated attacker to trigger a denial-of-service through crafted HTTP requests to the Remote Access SSL VPN service.

Attackers Exploit N-able Patch Bypass Flaw on RMM Servers

This Dark Reading article reports on a newly discovered authentication bypass vulnerability, CVE-2026-18577, in N-able's N-central platform. Attackers are exploiting this flaw to gain administrator access to the remote monitoring and management servers.

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Attackers are exploiting a recently patched directory-traversal vulnerability in Broadcom VMware vCenter to execute arbitrary code. They establish persistence using malicious cron jobs and reverse_ssh, with over 360 victims across 47 countries.

[deleted]