Critical ScreenConnect flaw now actively exploited in attacks
Teaser from the source
Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on ScreenConnect
Other advisories
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- MediumCVE-2026-11596connectwise screenconnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596connectwise screenconnect: unzureichende Prüfung von Mengenangaben
- CriticalCVE-2026-3564ConnectWise ScreenConnect: unzureichende Prüfung kryptografischer Signaturen
- CriticalCVE-2026-3564Eine Bedingung im ScreenConnect-Serverkomponente kann es einem Akteur mit Zugriff auf serverseitiges kryptografisches Material für die Authe...
- MediumCVE-2025-14823connectwise screenconnect: vertrauliche Informationen in übertragenen Daten
Other news entries
- More RMM Tools In the Wild, (Tue, Oct 6th)NewsSANS ISC Diary
- ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)NewsSANS ISC Diary
- Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing AttacksNewsThe Hacker News
- ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like AttacksNewsSecurityWeek
- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEVNewsThe Hacker News
- ConnectWise patches critical ScreenConnect authentication failure after five daysNewsCSO Online
- ConnectWise ScreenConnect: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- ConnectWise ScreenConnect: Schwachstelle ermöglicht nicht spezifizierten AngriffVulnerabilityBSI CERT-Bund
ID