n-able
Safeguard articles tagged "n-able" — guides, analysis, and best practices for software supply chain and application security.
7 articles
CVE-2025-8875: N-able N-Central Insecure Deserialization Vulnerability
CVE-2025-8875 affects N-able N-Central and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-08-13.
CVE-2025-8876: N-able N-Central Command Injection Vulnerability
CVE-2025-8876 affects N-able N-Central and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-08-13.
CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-18577 affects N-able N-central and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-03.
CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-18556 affects N-able N-central and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-04.
CVE-2026-86218: N-able N-central Static Code Injection Vulnerability
CVE-2026-86218 affects N-able N-central and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-09-08.
ConnectWise ScreenConnect, SimpleHelp and N-able N-central: Remote Access Tools Keep Entering KEV
Four vulnerabilities across three remote monitoring and management platforms confirmed as exploited between June and September 2026. RMM software's structural appeal to ransomware operators, explained through the actual mechanisms.
The Patch That Wasn't: CVE-2026-18577 and the Incomplete-Fix Problem
N-able patched an authentication bypass in N-central. Attackers found what the patch missed and used it as a zero-day, pivoting into Microsoft 365 and Okta. Incomplete fixes are their own bug class.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.