04 August 2026

2 vulnerabilities added to CISA's exploited-in-the-wild catalog this week.

One week of Security Weekly Digest, 2 stories, as published.

CVE-2026-18577: N-able N-central

N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.

Why it matters — Confirmed exploited in the wild. CVSS 8.2 (HIGH). CISA remediation deadline 06 Aug 2026 — 2 days out.

CISA KEV · 04 August 2026 · Read the original →

Exploited CVEs

CVE-2026-20316: Cisco Secure Firewall Management Center (FMC)

Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.

Why it matters — Confirmed exploited in the wild. CVSS 5.3 (MEDIUM). CISA remediation deadline 01 Aug 2026 — already passed.

CISA KEV · 04 August 2026 · Read the original →

Another week of patching the tools we use to manage everything else.

2 stories, every Tuesday

Published here every week. Follow by RSS to get it as it lands.

Subscribe by RSS All issues

← Previous issue Next issue →