N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

概要

参考情報

• documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm · Patch
• status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577 · Release Notes
• cve.org/CVERecord · VDB Entry
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• n-able.com/blog/n-central-security-update-august-2-2026 · Vendor Advisory
• CISA KEV · CVE-2026-18577

n-central のその他の脆弱性

• CVE-2026-86218緊急 9.8悪用確認済み（CISA KEV）N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
• CVE-2026-18556高 7.4悪用確認済み（CISA KEV）Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects…
• CVE-2025-11700高 7.5N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure
• CVE-2025-11367緊急 9.8The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization
• CVE-2025-11366緊急 9.8N-central < 2025.4 is vulnerable to authentication bypass via path traversal