ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- ConnectWise
- Product
- ScreenConnect
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Remote access
Why it ranks 57 (Critical)
- CISA KEV listed
- Exposed product class: remote access
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-84869 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.