ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

Mô tả

Tham khảo

• ConnectWise-Advisories/Disclosures · Third Party Advisory
• connectwise.com/company/trust/advisories · Vendor Advisory
• connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• huntress.com/blog/rogue-screenconnect-installations · Third Party Advisory
• CISA KEV · CVE-2026-84869

Lỗ hổng khác của screenconnect

• CVE-2026-11596TRUNG BÌNH 4.7In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user wit…
• CVE-2025-14823TRUNG BÌNH 5.3In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related k…
• CVE-2025-14265NGHIÊM TRỌNG 9.1In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the inst…
• CVE-2025-3935CAO 7.2ĐANG BỊ KHAI THÁC (CISA KEV)ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState …
• CVE-2024-1709NGHIÊM TRỌNG 10.0ĐANG BỊ KHAI THÁC (CISA KEV)ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, whic…