A critical vulnerability in N-able's N-central servers, identified as CVE-2026-18577, has been exploited by threat actors who discovered a patch bypass, allowing them to hack into the systems. This exploit has significant implications, as it expands the active attack surface for organizations using N-central servers. The vulnerability was patched by N-able, but the fact that threat actors were able to bypass the initial patch raises concerns about the effectiveness of the fix. The exploitation of CVE-2026-18577 in the wild highlights the need for organizations to prioritize patching and monitoring their systems based on their exposure and evidence of exploitation1. This vulnerability poses a significant risk to organizations that have not applied the patch or have inadequate security measures in place, so practitioners should take immediate action to assess their exposure and apply the necessary patches to prevent potential breaches.