ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise · ScreenConnect
Date added (CISA)
2026-09-11
Remediation due
2026-09-14
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.