Patchfirst
Patchfirst

Ending Cyber Risk with Aurora Endpoint Security

arcticwolf.com · Undated · Licence: not cleared; local research copy only

Read the original ↗

CVEs this report names

5 CVEs
  1. CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts7 reports
    14.6%Top 3.3%
    88.0priority
  2. CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1078Valid Accounts5 reports
    7.9%Top 5.3%
    82.1priority
  3. CVE-2026-50656Microsoft Defender Elevation of Privilege Vulnerability
    Microsoft · Microsoft Malware Protection EnginePublic exploitHigh · 7.87 reports
    11.2%Top 4.1%
    42.4priority
  4. CVE-2026-28323SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability
    SolarWinds · Web Help DeskCritical · 9.85 reports
    1.0%Top 36%
    31.2priority
  5. CVE-2026-28299SolarWinds Web Help Desk Denial-of-Service Vulnerability
    SolarWinds · Web Help DeskHigh · 8.25 reports
    0.7%Top 46%
    29.0priority

Where it names them

CVE-2026-18577
Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All
Original (opens in a new tab) ↗
CVE-2026-18556
Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All
Original (opens in a new tab) ↗
CVE-2026-50656
12, 2026Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass
Original (opens in a new tab) ↗
CVE-2026-28323
Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW
Original (opens in a new tab) ↗
CVE-2026-28299
Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All
Original (opens in a new tab) ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.

↑ ↓ chooseEnter openEsc close