CVE Vulnerability Advisory Database

[Affected Scope] N-able N-central versions up to and including 2026.3.1

[Impact] Attackers can bypass authentication and achieve full account takeover by exploiting an incomplete patch for CVE-2026-18556

[Mitigation] Immediately upgrade to N-central 2026.3 Hotfix 1 or later, and restrict external access to the management interface until patched

[Affected Scope] All on-premises and cloud instances of N-able N-central running version 2026.1 and prior

[Impact] Unauthenticated attackers can bypass authentication mechanisms to gain administrative privileges, potentially leading to full compromise of managed client environments

[Mitigation] Apply the official security patches immediately and restrict external internet access to the N-central management console

[Affected Scope] All JetBrains TeamCity versions prior to 2023.11.4

[Impact] Unauthenticated remote attackers can completely bypass authentication mechanisms to gain administrative privileges, leading to full server compromise and arbitrary remote code execution (RCE)

[Mitigation] Immediately upgrade TeamCity server to version 2023.11.4 or later, or apply the official security patch plugin

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-1709

[Impact] ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, whic...

[Mitigation] Apply vendor security patches and restrict external network exposure.