**IMPORTANT UPDATE: N-central Active Exploitation (CVE-2026-18577). 2026.3.1.7 Hotfix Released
ResolvedMinor
August 01, 2026 - Started 13 days ago
- Lasted 5 days
Incident Report
Summary
AI Generated
N-able identified an actively exploited security vulnerability (CVE-2026-18577) affecting all versions of N-central prior to 2026.3, impacting both hosted and on-premise deployments across Americas, Europe, and APAC regions. Mitigations were applied to all hosted instances, and the 2026.3.1.7 Hotfix was released to fully remediate the issue, also addressing a second vulnerability (CVE-2026-18556). All customers are urged to upgrade to version 2026.3.1.7 immediately, with on-premise customers required to manually apply the hotfix using provided documentation.
**IMPORTANT UPDATE: N-central Active Exploitation (CVE-2026-18577). 2026.3.1.7 Hotfix Released ** N-able has addressed a vulnerability in N-able N-central, which impacted all versions of N-central prior to 2026.3. **N-able recommends all customers upgrade to the 2026.3.1.7 Hotfix version immediately. **
**N-able N-central Hosted Customers:** Mitigations were applied to all hosted N-central instances previously, and the hotfix rollout is beginning now.
**N-central On-Premise Customers:** Download and upgrade using the instructions provided below and on the N-able support portal. If you need assistance with the upgrade process, please contact our support team at https://me.n-able.com/s/
Upgrading from legacy versions: https://documentation.n-able.com/N-central/userguide/Content/ReleaseDocs/Release_Notes/upgrade_path.htm
Release Notes with download details is here: https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/
CVE Details can be found here: https://www.cve.org/CVERecord?id=CVE-2026-18577
**Upgrading to 2026.3.1 also addresses CVE-2026-18556 with details found at: ** https://www.cve.org/CVERecord?id=CVE-2026-18556
We strongly recommend staying vigilant and monitoring your environments closely in the meantime. Further updates will be shared as quickly as possible.
For assistance, contact N-able support: https://me.n-able.com/
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.