VulnerabilityBSI CERT-Bund
ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ConnectWise ScreenConnect (RMM+ Extension) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-45461 linked CVE
Open advisory with all CVEs
More on ScreenConnect
Other advisories
- CriticalCVE-2026-127063ConnectWise ScreenConnect (RMM+ Extension) : Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
Other news entries
- New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksNewsBleepingComputer
- SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack PathsNewsThe Hacker News
- Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsNewsThe Register — Security
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Active ScreenConnect attacks breach MSPs, impact dozens of organizationsNewsBleepingComputer
- Malicious ScreenConnect deployments observedNewsSophos X-Ops
- More RMM Tools In the Wild, (Tue, Oct 6th)NewsSANS ISC Diary
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4546
ID