N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.

CVE-2026-18556 is a high-severity authentication bypass vulnerability affecting N-able N-central, a widely used IT management and remote monitoring platform. The vulnerability exploits an alternate path or channel to circumvent authentication controls, potentially allowing unauthorized access to managed systems. N-able has released a hotfix (N-central 2026.3 Hotfix 1) to mitigate the issue. The vulnerability is tracked by CISA and listed in the National Vulnerability Database (NVD). CISA's BOD 26-04 directive mandates prioritizing security updates based on risk, placing this vulnerability under active remediation requirements. Forensic triage guidance has also been issued alongside the directive. Organizations using N-able N-central are strongly advised to apply the hotfix immediately. The high Kans value reflects the critical nature of authentication bypass vulnerabilities in enterprise management tools.