CISA Adds One Known Exploited Vulnerability to Catalog

CISA added CVE-2026-18577—an N-able N-central authentication bypass using an alternate path or channel—to its Known Exploited Vulnerabilities (KEV) Catalog after observing active exploitation. The advisory emphasizes the high risk to the federal enterprise, references Binding Operational Directive 26-04 to prioritize remediation of KEV-listed flaws, and urges organizations to adopt risk-based vulnerability management and submit evidence of exploited vulnerabilities for KEV consideration.