KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-84869
ConnectWise · ScreenConnect
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
Correlated Federal Court Cases & Exploitation Context (0)
No federal court indictment in the current archive directly cites CVE-2026-84869. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-09-11.
Associated Government Advisories
Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.