N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

N-able reported that attackers exploited an authentication bypass in N-central to gain remote administrative access to customer systems. The initial fix for CVE-2026-18577 was incomplete, and the first unaffected version, build 2026.3.1.7, was released on August 2.