CVE-2026-18577

HighCVSS 8.2

Published: 02/08/2026(UTC)Translated: 03/08/2026(UTC)NVD NIST

Summary

An incomplete patch for CVE-2026-18556 allows authentication bypass and account takeover in N-central versions up to 2026.3.1.

An attacker can gain unauthorized access to user accounts, leading to a breach of confidentiality and integrity of data managed by N-central.

Immediately update N-central to a version later than 2026.3.1 that includes the complete fix for this vulnerability.

Original NVD description (English source)

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1