What’s Vulnerable › Vulnerabilities

CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

• Severity: critical (CVSS 9.9 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2026-09-11
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-08 · updated 2026-09-12
• Weakness: CWE-269

Description

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

Affected products

• ConnectWise ScreenConnect: before 26.6.5.9742 — fixed in 26.6.5.9742

How to fix

Upgrade to a fixed version: ConnectWise ScreenConnect 26.6.5.9742. Check the vendor advisory for mitigations.

References

• https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869
• https://www.connectwise.com/company/trust/advisories
• https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-84869
• https://www.huntress.com/blog/rogue-screenconnect-installations

Get alerted when CVE-2026-84869 or the next vulnerability affects your stack