CVE-2026-9089高 8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operatio…
CVE-2026-6066高 7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center w…
CVE-2025-11493高 7.5The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, an…
CVE-2025-11492高 7.5In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor w…
CVE-2023-23130中 5.9Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled.…