Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-84869: ConnectWise ScreenConnect allows unauthorized file transfer in remote session
CVE-2026-84869 · published 1 month ago · actively exploited
Summary
The remote-access tool ConnectWise ScreenConnect can let an attacker move and run files through an already‑open remote session without the user’s permission. This could let malicious code be placed on a computer while someone is connected. Apply the latest vendor update and restrict remote sessions to trusted users only.
What to do
- Update connectwise screenconnect to version 26.6.5.9742 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| connectwise | screenconnect |
All versions prior to 26.6.5 < 26.6.5.9742 |
Original advisory text
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
References
- https://www.connectwise.com/company/trust/advisories Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-... US Government Resource
- https://www.huntress.com/blog/rogue-screenconnect-installations Third Party Advisory
- https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869 Third Party Advisory
- https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenco... Vendor Advisory
Internet-facing
3 days
and check for signs of compromise
Internal
14 days
- Known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
<1%
chance of attack within 30 days
Type
CWE-269Improper Privilege Management
CWE-862Missing Authorization
Timeline
Published8 Sep 2026
Updated9 Oct 2026
First seen8 Sep 2026
Track software like this
Free during beta