CVE-2026-84869: ConnectWise ScreenConnect
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
- Vendor
- ConnectWise
- Product
- ScreenConnect
- Vulnerability
- ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- Date added
- Sep 11, 2026
- CISA due date (U.S. federal agencies)
- Sep 14, 2026
- Known ransomware campaign use
- Unknown
- Weakness (CWE)
- CWE-269, CWE-862
References
This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.
Last updated: · Catalog version 2026.10.02