ConnectWise security advisory (AV26-903)
ConnectWise patches ScreenConnect CVE-2026-84869, reported exploited in the wild; administrators should update to 26.6.5.
ConnectWise shipped ScreenConnect 26.6.5 to fix a vulnerability tracked as CVE-2026-84869 affecting versions prior to 26.6.5. Open-source reporting indicates the flaw is being exploited in the wild. The Canadian Centre for Cyber Security issued advisory AV26-903 urging users and administrators to apply the patch.
- CVE-2026-84869 affects ScreenConnect versions prior to 26.6.5.
- Open-source reporting indicates exploitation in the wild.
- Fix is available in ScreenConnect 26.6.5.
- CVEs
- CVE-2026-84869
- Vendors
- ConnectWise
- Products
- ScreenConnect
- Organizations
- Canadian Centre for Cyber Security
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-84869 | Missing authorization in ScreenConnect client allows unauthorized file execution | 9.9 | <1% | KEV | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-903 Date: September 9, 2026 As of September 8, 2026, ConnectWise is affected by a vulnerability in the following product: ScreenConnect versions prior to 26. 6. 5 Open-source reporting indicates that CVE-2026-84869 is being exploited in the wild.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.