ConnectWise Patches ScreenConnect Vulnerability Exploited

Tue, 15 Sep 2026 05:51:44 +0000

ConnectWise has released urgent patches for a critical-severity vulnerability in the ScreenConnect remote access and support software that has been exploited in worm-like attacks. Tracked as CVE-2026-84869 (CVSS score of 9.9/10), the security defect is described as a missing authorization and improper privilege management issue. The bug creates “a condition in the ScreenConnect client that may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances,” ConnectWise explains in its advisory.

Exploit on Ask Sendai

ConnectWise Patches ScreenConnect Vulnerability Exploited