Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-84869

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 58.8%
CVSS Severity
CVSS v3 Score 9.9
Proposed Action
ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.
Ransomware Campaign
Unknown
Products affected by CVE-2026-84869


Contact Us

Shodan ® - All rights reserved