CVE-2026-84869: Connect Wise Screen Connect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-84869ConnectWise
- Related
- SCKit Malware Turns Screen Connect Support Sessions Into Potential MSP Attack Paths Cyber Risks · Nov 12, 2026CVE-2024-1708: Connect Wise Screen Connect Path Traversal Vulnerability Known Exploited Vulnerabilities · Apr 28, 2026CVE-2025-3935: Connect Wise Screen Connect Improper Authentication Vulnerability Known Exploited Vulnerabilities · Jun 02, 2025