CVE-2026-84869
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
CISA Known Exploited Vulnerability
Vendor / Product
ConnectWise — ScreenConnect
Date Added
2026-09-11
Remediation Due
2026-09-14
https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-84869
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| connectwise | screenconnect | < 26.6.5.9742 |
References & Advisories (5)
Vendor Advisory
Vendor Advisory
US Government Resource
Third Party Advisory
Third Party Advisory