Bored BeaverTail & InvisibleFerret Yacht Club
esentire.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
2 CVEs- CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityN-able · N-centralKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts7 reports14.6%Top 3.3%88.0priority
- CVE-2026-16232Check Point SmartConsole Improper Authentication VulnerabilityCheck Point · SmartConsoleKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report3.5%Top 11%76.6priority
Where it names them
CVE-2026-18577 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
N-central Vulnerability (CVE-2026-18577) Under Exploitation
On August 2nd, 2026, N-able disclosed CVE-2026-18577, an authentication bypass vulnerability impacting N-central instances.
CVE-2026-16232 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
PoC Exploit Code Released for Check Point SmartConsole Zero-Day Vulnerability (CVE-2026-16232)
On July 28th, 2026, Rapid7 Labs published technical details and Proof-of-Concept (PoC) exploit code for CVE-2026-16232 (CVSS: 9.1), a critical authentication bypass vulnerability in the…
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.