Latest / Tech Talks With Kinsoft
N-able N-central – God Mode on the Management Plane, and the Hotfix That Wasn't Enough
Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!
At the start of August 2026, attackers exploited an authentication bypass in N-able's N-central remote monitoring and management platform to obtain full administrative control of the console - and then used the product's own legitimate remote access feature to reach the machines it manages. The vendor shipped a fix. It was not enough.
The six-day timeline. 1 Aug: N-able detects active exploitation of CVE-2026-18556 (CVSS 7.4 under v3.1, 8.2 under v4.0); all versions affected, hosted and…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.