CWE-288

N-able N-central Critical Authentication Bypass CVE-2026-18577 Exploited in MSP Supply Chain Attacks

CISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.