CVE-2026-84869

CRITICALCVSS 9.9Known Exploited

CISA Known Exploited Vulnerability

https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-84869

Remediation deadline: September 14, 2026

Description

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.

Timeline

Published:September 8th, 2026 8:18 PM

Last modified:September 12th, 2026 4:16 AM

Added to KEV:September 11th, 2026

CVSS Scoring

CVSS v3: 9.9 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Software

From NVD CPE configuration data

Vendors

connectwise

Products

screenconnect

Weaknesses (CWE)

CWE-269 CWE-862

References & Reports

Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute