Exploit / PoCcriticalExploited in the wild

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

The Hacker Newsby @TheHackersNewsApr 29, 2026 · 08:46 UTC (Apr 29, 2026)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-1708 CVE-2026-32202 CVE-2026-21510 CVE-2026-21513 CVE-2024-1709

Tags: cve-2024-1708 cve-2024-1709 cve-2026-21510 cve-2026-21513 cve-2026-32202 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-1709 +1 related CVE CVE-2024-1708	Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts	10.0 group max	100%	KEVRansomwarePoC ×3	Feb 21, 2024 KEV Feb 22, 2024
CVE-2026-21510 +1 related CVE CVE-2026-21513	Security Feature Bypass in Microsoft Windows Shell Actively Exploited (CVE-2026-21510)	8.8	61%	KEV	Feb 10, 2026 KEV Feb 10, 2026
CVE-2026-32202	Spoofing Flaw in Windows Shell (CVE-2026-32202) Actively Exploited	4.3	71%	KEV	Apr 14, 2026 KEV Apr 28, 2026

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Apr 29, 2026 Vulnerability / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.