CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–5 of 5 records

CVE Vendor Product Added Due Status
CVE-2026-86218 — N-able N-central Static Code Injection Vulnerability
N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.
 N-able N-central Sep 8, 2026 Sep 11, 2026
CVE-2026-18556 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.
 N-able N-central Aug 4, 2026 Aug 7, 2026
CVE-2026-18577 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.
 N-able N-central Aug 3, 2026 Aug 6, 2026
CVE-2025-8875 — N-able N-Central Insecure Deserialization Vulnerability
N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.
 N-able N-central Aug 13, 2025 Aug 20, 2025
CVE-2025-8876 — N-able N-Central Command Injection Vulnerability
N-able N-Central contains a command injection vulnerability via improper sanitization of user input.
 N-able N-central Aug 13, 2025 Aug 20, 2025