CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-9089

The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 0.2%

CVSS Severity

CVSS v3 Score 8.8

References

https://www.connectwise.com/company/trust/security-bulletins/2026-05-21-connectwise-automate-bulletin

Products affected by CVE-2026-9089

Connectwise » Automate » Version: N/A

cpe:2.3:a:connectwise:automate:-
Connectwise » Automate » Version: 2019.12

cpe:2.3:a:connectwise:automate:2019.12
Connectwise » Automate » Version: 2020.0

cpe:2.3:a:connectwise:automate:2020.0
Connectwise » Automate » Version: 2020.7

cpe:2.3:a:connectwise:automate:2020.7
Connectwise » Automate » Version: 2020.8

cpe:2.3:a:connectwise:automate:2020.8
Connectwise » Automate » Version: 2022.10

cpe:2.3:a:connectwise:automate:2022.10
Connectwise » Automate » Version: 2022.11

cpe:2.3:a:connectwise:automate:2022.11
Connectwise » Automate » Version: 2022.12

cpe:2.3:a:connectwise:automate:2022.12
Connectwise » Automate » Version: 2023.1

cpe:2.3:a:connectwise:automate:2023.1
Connectwise » Automate » Version: 2023.4

cpe:2.3:a:connectwise:automate:2023.4
Connectwise » Automate » Version: 2023.5

cpe:2.3:a:connectwise:automate:2023.5
Connectwise » Automate » Version: 2024.2

cpe:2.3:a:connectwise:automate:2024.2
Connectwise » Automate » Version: 2024.3

cpe:2.3:a:connectwise:automate:2024.3
Connectwise » Automate » Version: 2025.9

cpe:2.3:a:connectwise:automate:2025.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-9089

Products

Pricing

Contact Us