ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise warns of an unpatched ScreenConnect flaw affecting file transfer in support sessions and shares interim mitigations for MSPs.
ConnectWise disclosed a new ScreenConnect Remote Access vulnerability affecting file transfer behavior in both cloud and on-premises deployments; no CVE ID or patch is available yet, with a fix planned later this week. The vendor published temporary mitigation steps that remove TransferFiles permissions from session groups across all roles. Shadowserver tracks nearly 6,000 internet-exposed ScreenConnect instances. Previous ScreenConnect flaws, including CVE-2024-1709, were exploited by ransomware gangs and North Korea's Kimsuky, and three ScreenConnect vulnerabilities are on CISA's actively exploited catalog.
- New flaw affects file transfer in ScreenConnect Support and Access sessions; no CVE assigned yet
- Temporary mitigation: deselect TransferFiles permission for all session groups across roles
- Shadowserver tracks nearly 6,000 exposed ScreenConnect instances online
- Prior ScreenConnect bugs (CVE-2024-1709, CVE-2025-3935, CVE-2026-3564) drew ransomware, APT and state-sponsored attacks
- Products
- ScreenConnect
- Organizations
- ConnectWiseShadowserverCISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-1709 | Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts | 10.0 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2025-3935 | ViewState Code Injection in ConnectWise ScreenConnect May Lead to RCE | 7.2 | 4% | KEV | KEV |
| CVE-2026-3564 | A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain… | 9.0 | <1% |
From the original article
2 min read at bleepingcomputer.com
ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.