Description (CNA)
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ConnectWise / ScreenConnect | affected All versions prior to 26.6.5 |
CWE
CWE-862, CWE-269
References
- https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin
- https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869
- https://www.connectwise.com/company/trust/advisories
ADP enrichment
No English description supplied.