PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-84869 ConnectWise CVE debrief

CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability debrief. The vulnerability involves Improper Privilege Management and Missing Authorization, which could allow attackers to gain unauthorized access or elevate privileges. Defenders should assess exposure, prioritize patching according to CISA's guidance, and ensure compliance with BOD 26-04. The CISA Known Exploited Vulnerabilities catalog and CVE Program record indicate a critical vulnerability in ConnectWise ScreenConnect with a CVSS score of 9.9. The vendor has provided security bulletins for affected products. Confirm whether affected product deployments exist in your

Vendor
ConnectWise
Product
ScreenConnect
CVSS
CRITICAL 9.9
CISA KEV
Listed
Original CVE published
2026-09-11
Original CVE updated
2026-09-11
Advisory published
2026-09-11
Advisory updated
2026-09-11

Who should care

Defenders and IT administrators responsible for ConnectWise ScreenConnect installations should assess exposure and prioritize patching according to CISA's BOD 26-04 guidance.

Why it matters

CVE-2026-84869 is a critical vulnerability in ConnectWise ScreenConnect with a CVSS score of 9.9. It is known to be exploited in the wild and requires immediate attention from defenders and IT administrators. The vulnerability involves Improper Privilege Management and Missing Authorization, which could allow attackers to gain unauthorized access or elevate privileges. Defenders should assess exposure, prioritize patching according to CISA's guidance, and ensure compliance with BOD 26-04.

  • Verify and apply vendor-provided security updates to prevent potential exploitation.
  • Assess asset internet exposure to determine risk and prioritize patching.
  • Ensure compliance with CISA's BOD 26-04 guidance for prioritizing security updates based on risk.

Technical summary

The ConnectWise ScreenConnect vulnerability (CVE-2026-84869) is a critical Improper Privilege Management and Missing Authorization issue with a CVSS score of 9.9. It is listed in the CISA Known Exploited Vulnerabilities catalog, indicating known exploitation in the wild.

Defensive priority

High

Recommended defensive actions

  • Review and apply vendor-provided security updates for ConnectWise ScreenConnect according to CISA's BOD 26-04 guidance.
  • Assess and prioritize patching based on risk, ensuring compliance with CISA's guidance.
  • Evaluate asset internet exposure and adhere to BOD 26-04 patching guidelines.

Evidence notes

The CISA Known Exploited Vulnerabilities catalog and CVE Program record indicate a critical vulnerability in ConnectWise ScreenConnect with a CVSS score of 9.9. The vendor has provided security bulletins for affected products.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-84869 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-84869

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-84869 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-84869

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.