Exploited vulnerabilities
ConnectWise
4 ConnectWise vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue4
Last 12 months2
In ransomware campaigns2
Last addition11 September 2026
The vulnerabilities4
- 11 September 2026CVE-2026-84869ScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- 28 April 2026CVE-2024-1708ScreenConnectConnectWise ScreenConnect Path Traversal VulnerabilityRansomware
- 2 June 2025CVE-2025-3935ScreenConnectConnectWise ScreenConnect Improper Authentication Vulnerability
- 22 February 2024CVE-2024-1709ScreenConnectConnectWise ScreenConnect Authentication Bypass VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, ConnectWise included.