CVE record · 4 sources
CVE-2026-84869
KEVConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- Vendor
- ConnectWise
- Product
- ScreenConnect
- EPSS
- 1.00 (p100)
- CISA KEV
- listed
- Exposure class
- Remote access, Web platform, Developer platform
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or…
-
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability CVE-2026-42018 JFrog…
-
September 2026 CVE Landscape
In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.