CVE-2026-84869

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

Screenconnect

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

8. Sep 2026

Ausgewertete Quellen

• Hersteller
  https://www.connectwise.com/company/trust/advisories
• Hersteller
  https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin
• Hinweis
  https://www.huntress.com/blog/rogue-screenconnect-installations
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-84869
• CISA
  ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
• NVD
  CVE-2026-84869
• GitHub
  https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869