CISA adds N-able N-central flaw to exploited vulnerabilities catalog

CISA said on Aug. 3 that it added CVE-2026-18577, a vulnerability affecting N-able N-central, to its Known Exploited Vulnerabilities Catalog after finding evidence of active exploitation.

In its alert, the agency said the flaw is an authentication bypass using an alternate path or channel. CISA said this kind of weakness is a frequent attack vector for malicious cyber actors and can pose significant risks to the federal enterprise.

CISA’s notice also pointed readers to Binding Operational Directive 26-04, titled Prioritizing Security Updates Based on Risk. The directive sets vulnerability management requirements for Federal Civilian Executive Branch agencies. CISA said it requires those agencies to prioritize rapid remediation of high-risk vulnerabilities, including KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation. It also sets expectations for when agencies must check whether threat actors compromised a system before it was patched.

CISA said BOD 26-04 applies only to FCEB agencies, but it encourages all organizations to use risk-based vulnerability management and to prioritize remediation of KEV Catalog vulnerabilities. The agency said it will continue to add vulnerabilities that meet its criteria. It also said people aware of an exploited vulnerability that is not yet listed can submit it through the KEV Nomination Form, as long as the issue has a CVE ID, evidence of exploitation and clear mitigation guidance.

CISA’s alert did not name affected organizations or describe the extent of exploitation. The notice said only that the catalog entry was added because of evidence of active exploitation.

Sources

• CISA Cybersecurity Advisories: CISA adds one known exploited vulnerability to catalog

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.