[ Vendor · 5 CVEs ]
ConnectWise
CVEs affecting ConnectWise published in the last 30 days, plus any ConnectWise CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-84869 | 8 Sep 2026 | CVSS 9.9 | ConnectWise ScreenConnect Improper Privilege Management and Missing AuthorizationA condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host… | Exploited |
| CVE-2025-3935 | 25 Apr 2025 | CVSS 7.2 | ConnectWise ScreenConnect Improper AuthenticationScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to… | Exploited |
| CVE-2024-1708 | 21 Feb 2024 | CVSS 8.4 | ConnectWise ScreenConnect Path TraversalConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote… | Exploited |
| CVE-2024-1709 | 21 Feb 2024 | CVSS 10.0 | ConnectWise ScreenConnect Authentication BypassConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow… | ExploitedFix |
| CVE-2017-18362 | 5 Feb 2019 | CVSS 9.8 | Kaseya VSA SQL InjectionConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to… | Exploited |