Feds get 3 days to patch N-able God mode flaw under active exploit
- CISA gives US agencies three days to patch exploited N-able flaw
- Bug grants attackers full admin access to N-central consoles
- 28.6% of exposed self-hosted servers still unpatched as of 3 August
The US Cybersecurity and Infrastructure Security Agency (CISA) has added an actively exploited N-able vulnerability to its Known Exploited Vulnerabilities catalogue, giving federal agencies just three days to patch it. The flaw, tracked as CVE-2026-18577, affects N-central, a platform widely used by managed service providers (MSPs) to administer…