CVE-2026-84869Vulnerability
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
Reported by 3 independent sources · first reported by Huntress · last reported
Last reported 11 days ago
Fix due 14 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 60% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-84869”
-
Q3 2026 Vulnerability Trend Report“CVE-2026-84869 Inadequate privilege management in ConnectWise ScreenConnect allowed for the transmission and execution of arbitrary files through active sessions.”
-
Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity“The vulnerability (CVE-2026-84869) ranks 9.9 on the CVSS scale.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-76460, CVE-2026-5430, CVE-2026-85706, CVE-2026-85102, CVE-2026-88771, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-50522, CVE-2026-48710, CVE-2025-39964, CVE-2026-16812, CVE-2026-20316, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441
Thanks — we review every report.