SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
Linked advisories
- CVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CVE-2026-84869ConnectWise ScreenConnect — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
Affected vendors and products
More on ScreenConnect
Other advisories
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirm…
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596In ScreenConnect™ versions prior to 26.2, input
Other news entries
- New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksNewsBleepingComputer
- Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCsNewsThe Register — Security
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue ClientsNewsThe Hacker News
- Active ScreenConnect attacks breach MSPs, impact dozens of organizationsNewsBleepingComputer
- Malicious ScreenConnect deployments observedNewsSophos X-Ops
- More RMM Tools In the Wild, (Tue, Oct 6th)NewsSANS ISC Diary
- ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)NewsSANS ISC Diary
Source: https://thehackernews.com/2026/11/sckit-malware-targets-screenconnect.html
ID