Exploited in the wild ScreenConnect Kimsuky ransomware ConnectWise auth-bypass
Critical ScreenConnect flaw now actively exploited in attacks
CVE Tools coverage
CISA has added ConnectWise ScreenConnect vulnerability CVE-2026-84869 to its Known Exploited Vulnerabilities catalog after attacks began targeting the flaw. The missing-authorization and privilege-management issue affects ScreenConnect clients before version 26.6.5 and can let attackers with basic privileges transfer or run files during active remote sessions without host confirmation. Organizations should update to ScreenConnect 26.6.5 or later, as exposed unpatched instances remain reachable online.