ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

CRITICAL 9.9EXPLOITED (CISA KEV)CVE-2026-84869 · Published 08/09/2026 · updated 12/09/2026

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 11/09/2026. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
screenconnect connectwise	`< 26.6.5.9742`	`26.6.5.9742`

Description

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

References

ConnectWise-Advisories/Disclosures · Third Party Advisory
connectwise.com/company/trust/advisories · Vendor Advisory
connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
huntress.com/blog/rogue-screenconnect-installations · Third Party Advisory
CISA KEV · CVE-2026-84869

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free