MSRXConnectWise vulnerabilities being exploited
2 ConnectWise flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 1 product: ScreenConnect. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-09-11 | CVE-2026-84869 ScreenConnect ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation. | 2026-09-14 |
| 2026-04-28 | CVE-2024-1708 ScreenConnect ransomwareConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems. | 2026-05-12 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.