CVE-2026-9089

概要

参考情報

• connectwise.com/company/trust/security-bulletins/2026-05-21-connectwise-automate-bulletin · Vendor Advisory

automate のその他の脆弱性

• CVE-2026-6066高 7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center w…
• CVE-2025-11493高 7.5The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, an…
• CVE-2025-11492高 7.5In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor w…
• CVE-2023-23130中 5.9Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled.…
• CVE-2023-23126中 6.1Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and used to manipulate users to perform unintend…