Thursday, August 6, 2026

July 2026 Patch Tuesday: 533 CVEs Patched, 4 Actively Exploited — August 11 Deadline Looming

Microsoft's July 2026 Patch Tuesday addressed 533 CVEs across 69 update packages, with 4 CVEs confirmed as actively exploited and added to the CISA Known Exploited Vulnerabilities (KEV) catalog. Next Patch Tuesday is August 11, 2026, giving MSPs one week to finalise July patch deployments before the next wave. Prioritise the 4 KEV-listed CVEs immediately; use MSRC or Senserva's patch tracker to identify affected KBs in your environment.

CRITICAL: N-able N-central Auth Bypass (CVE-2026-18577) Actively Exploited — Emergency Hotfix Released

N-able confirmed on 1 August 2026 that attackers are actively exploiting an authentication bypass vulnerability (CVE-2026-18577) in its N-central RMM platform, affecting all versions before 2026.3.1.7. A prior patch for the related CVE-2026-18556 (released in N-central 2026.2) proved incomplete, and attackers found an alternative exploitation path — Finland's national cyber security centre issued an advisory on 2 August confirming all pre-hotfix versions were vulnerable. N-able released emergency hotfix 2026.3.1.7 on 2 August; all customers — both hosted and on-premises — must upgrade immediately with no viable workaround short of patching.

N-able N-central Compromise: Initial Fix for CVE-2026-18556 Was Incomplete, Attackers Pivoted to New Attack Path

N-able's Adlumin MDR detected unusual activity in a customer environment on 31 July 2026 that led to discovery of zero-day exploitation of N-central servers; investigation revealed the earlier CVE-2026-18556 patch (in build 2026.2) left an alternative exploitation route unblocked. The new CVE-2026-18577 expands the affected range to all builds before 2026.3.1.7, and N-able has published six attacker IP addresses — four identified as Mullvad or NordVPN exit nodes — to assist with threat hunting. MSPs running N-central should apply hotfix 2026.3.1.7 without delay and review N-central server logs for signs of compromise.

N-able N-central Zero-Day Exploitation Is a Direct AU MSP Supply-Chain Risk — Patch Hotfix 2026.3.1.7 Immediately

The active exploitation of CVE-2026-18577 in N-able N-central represents a critical supply-chain risk for Australian MSPs: a compromised N-central server gives attackers access to managed client environments at scale, including the ability to deploy malware or ransomware across all connected endpoints. Finland's national cyber security centre issued an advisory on 2 August; Australian MSPs should treat this as an equivalent ACSC-level alert and apply hotfix 2026.3.1.7 before business opening on Friday 7 August. There is no viable workaround — patching is the only remediation.

CRN Australia MSP Index Now Live — AU MSPs Invited to List Ahead of August Pipeline Event Analysis

CRN Australia's MSP Index directory is now accepting listings from Australian managed service providers, with analysis of the dataset to be presented at the Pipeline event in August 2026. Early survey data shows 75% of initial respondents offer consulting services and 70% offer data protection, but far fewer provide data governance or information management. MSPs not yet listed should complete the survey to be eligible for CRN editorial profiles, networking opportunities, and benchmarking data.

CRN Australia Channel Awards 2026 Shortlist Announced — MSP Categories Expanded

CRN Australia has announced the finalists for the 2026 CRN Channel Awards, with MSP of the Year and Service Provider of the Year split into headcount-based sub-categories due to an overwhelming number of applications. The expansion reflects the growth and diversity of the Australian MSP community, with awards also covering MSSPs, ESG projects, and a Lifetime Achievement Award. Australian MSPs should check the CRN Australia site for their shortlist status and use the awards as a benchmark for competitive positioning.