{"schema":"vulnpedia.research/1","cve":"CVE-2026-18556","references":[{"url":"https://uptime.n-able.com/","tags":["Vendor Advisory"],"source":"mitre","sourceId":"N-able","modified":"2026-08-01T19:59:30.913Z","origins":[{"source":"mitre","sourceId":"N-able","modified":"2026-08-01T19:59:30.913Z","url":"https://uptime.n-able.com/"},{"source":"nvd","sourceId":"CVE-2026-18556","modified":"2026-10-23T22:10:00.160","url":"https://uptime.n-able.com/"}]},{"url":"https://www.n-able.com/blog/n-central-security-update-august-2-2026","tags":["vendor-advisory","Vendor Advisory"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-05T03:56:07.447Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-05T03:56:07.447Z","url":"https://www.n-able.com/blog/n-central-security-update-august-2-2026"},{"source":"nvd","sourceId":"CVE-2026-18556","modified":"2026-10-23T22:10:00.160","url":"https://www.n-able.com/blog/n-central-security-update-august-2-2026"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-05T03:56:07.447Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-05T03:56:07.447Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556"},{"source":"nvd","sourceId":"CVE-2026-18556","modified":"2026-10-23T22:10:00.160","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556"}]},{"source":"euvd","sourceId":"EUVD-2026-51918","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51918","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-51918","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51918"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-18556","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://previdian.com/CVE-2026-18556"}]},{"url":"https://uptime.n-able.com/event/201454/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://uptime.n-able.com/event/201454/"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://uptime.n-able.com/event/201522/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://uptime.n-able.com/event/201522/"}]},{"url":"https://cydome.io/maritime-cybersecurity-bulletin-august-7th-2026/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-7th-2026/"}]},{"url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/active-exploitation-of-remote-monitoring-and-management-platform-within-australia","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/active-exploitation-of-remote-monitoring-and-management-platform-within-australia"}]},{"url":"https://www.huntress.com/blog/n-able-vulnerability-exploitation","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://www.huntress.com/blog/n-able-vulnerability-exploitation"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/CreamyG31337/ncentral-compromise-ioc-triage","source":"poc-in-github","sourceId":"CVE-2026-18556","description":"Read-only N-able N-central CVE-2026-18556/CVE-2026-18577 post-exploitation IoC hunter for Windows endpoints","modified":"2026-08-06T03:45:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-18556","url":"https://github.com/CreamyG31337/ncentral-compromise-ioc-triage"},{"source":"poc-in-github","sourceId":"CVE-2026-18556","modified":"2026-08-06T03:45:11Z","url":"https://github.com/CreamyG31337/ncentral-compromise-ioc-triage"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-08-01T00:00:00Z","modified":"2026-08-01T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"N-able","product":"N-central","dueDate":"2026-08-07T00:00:00Z","cisaDateAdded":"2026-08-04T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","modified":"2026-08-01T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-18556","dateAdded":"2026-08-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://previdian.com/CVE-2026-18556"},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://uptime.n-able.com/event/201454/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-08-04T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://uptime.n-able.com/event/201522/","dateAdded":"2026-08-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://uptime.n-able.com/event/201522/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-7th-2026/","dateAdded":"2026-08-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-7th-2026/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/active-exploitation-of-remote-monitoring-and-management-platform-within-australia","dateAdded":"2026-08-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/active-exploitation-of-remote-monitoring-and-management-platform-within-australia"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://www.huntress.com/blog/n-able-vulnerability-exploitation","dateAdded":"2026-09-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://www.huntress.com/blog/n-able-vulnerability-exploitation"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-18556","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}]}