CVE-2024-1708Vulnerability
ConnectWise ScreenConnect Path Traversal Vulnerability
Reported by 2 independent sources · first reported by Huntress · last reported
Last reported 13 months ago
Fix due 12 May 2026
Used by ransomware: knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
10 reports, newest first · the exact sentence from each-
Ten Years of Resilience, Innovation & Community-Driven Defense“CVE-2024-1709 and CVE-2024-1708 were a breeze for attackers to exploit:”
-
141 Key Cybersecurity Statistics for 2026 and Beyond“In 2024, the most active campaign identified by Huntress targeted vulnerabilities CVE-2024-1709 and CVE-2024-1708 in ScreenConnect, representing two-thirds of identified traditional exploitation attempts.”
-
GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs“CVE-2024-1708”
-
2024: Revisiting a Year in Threats“A Catastrophe For Control: Understanding the ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708)”
-
SlashAndGrab ConnectWise ScreenConnect Vulnerability“…sued an advisory that all versions below 23.9.8 of their on-prem version of ScreenConnect had two vulnerabilities (CVE-2024-1709 and CVE-2024-1708) and urged their users to patch immediately.”
-
Guide: How to Know if your ScreenConnect Server is Hacked“You’ve probably seen it by now, but there was a major ConnectWise ScreenConnect vulnerability (CVE-2024-1708 and CVE-2024-1709) – which we’re calling “SlashAndGrab” – that’s been shared across the cybersecurity community.”
-
SlashAndGrab“SlashAndGrab: ScreenConnect Post-Exploitation in the Wild (CVE-2024-1709 & CVE-2024-1708)”
-
ConnectWise ScreenConnect CVE-2024-1709 & CVE-2024-1708“ConnectWise ScreenConnect CVE-2024-1709 & CVE-2024-1708”
-
Detection Guidance for ConnectWise CWE-288“UPDATE: Read our full analysis of CVE-2024-1709 & CVE-2024-1708 and detection guidance here.”
-
Vulnerability Reproduced: Immediately Patch ScreenConnect 23.9.8“UPDATE: Read our full analysis of CVE-2024-1709 & CVE-2024-1708 and detection guidance here.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2024-1709, CVE-2021-26855, CVE-2021-44228, CVE-2017-11882, CVE-2023-38831, CVE-2023-36884, CVE-2017-5753, CVE-2020-1472, CVE-2022-27925, CVE-2023-20198, CVE-2024-21762, CVE-2022-41082, CVE-2023-34362, CVE-2023-23397, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2024-3400, CVE-2017-5638, CVE-2023-4966
Thanks — we review every report.