Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-84869

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 50.8%
CVSS Severity
CVSS v3 Score 9.9
Proposed Action
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation.
Ransomware Campaign
Unknown
Products affected by CVE-2026-84869


Contact Us

Shodan ® - All rights reserved