← CVE Intelligence

CVE-2026-9089

ConnectWise / Automate PUBLISHED

Description (CNA)

The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.

Affected (CNA)

Vendor / productVersions
ConnectWise / Automateaffected All versions prior to 2026.5

CWE

CWE-494

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.