CVE-2026-18577

Technical details about the vulnerability are still not publicly known. Reports indicate that following exploitation attackers are leveraging the built-in RMM tools to further exploit the target environment. Once a foothold on hosts has been established, attackers deploy Cloudflare-based tunnels for persistence, allowing them to maintain access without an active N-Central session.

EPSS 54.07% · 98.9th percentile