en
ConnectWise is a global IT software company that provides technology for managed service providers and other IT solution providers. Its core business covers business management, service delivery, automation, remote access, cybersecurity, and data-related operations through a unified platform and partner ecosystem.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/23/2026, ConnectWise recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, ScreenConnect had the most security vulnerabilities in the ConnectWise ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-84869ScreenConnect Client: Guest-to-Host File Execution via File-Transfer ActionsCVE-2026-11596CVE-2026-11596CVE-2026-9089CVE-2026-9089CVE-2026-6066Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution CenterCVE-2026-3564ScreenConnect Instance Level Cryptographic Material Exposure| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-84869ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions | Exploitation statusKEV | FixYes | Affected productScreenConnect | Published09/08/2026 | SeverityCritical |
CVE-2026-11596CVE-2026-11596 | Exploitation statusNot exploited | FixYes | Affected productScreenConnect | Published06/10/2026 | |
CVE-2026-9089CVE-2026-9089 | Exploitation statusNot exploited | FixYes | Affected productAutomate | Published05/21/2026 | |
CVE-2026-6066Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center | Exploitation statusNot exploited | FixYes | Affected productAutomate | Published | |
CVE-2026-3564ScreenConnect Instance Level Cryptographic Material Exposure | Exploitation statusNot exploited | FixYes | Affected productScreenConnect | Published03/17/2026 | |
CVE-2026-0696Session Cookies Missing HttpOnly Attribute | Exploitation statusNot exploited | FixYes | Affected productPSA | Published01/16/2026 | |
CVE-2026-0695Stored XSS in Time Entry Audit Trail | Exploitation statusNot exploited | FixYes | Affected productPSA | Published01/16/2026 | |
CVE-2025-14823Certificate Signing Extension Returns Encrypted Values | Exploitation statusNot exploited | FixNo | Affected productScreenConnect | Published | |
CVE-2025-14265Improper server-side validation in ScreenConnect extension framework | Exploitation statusNot exploited | FixYes | Affected productScreenConnect | Published | |
CVE-2025-11493Self-Update Verification Mechanism Process in ConnectWise Automate | Exploitation statusNot exploited | FixYes | Affected productAutomate | Published |
40 Results | Page 1 of 4
| SeverityHigh |
| SeverityCritical |
| SeverityMedium |
| SeverityCritical |
| SeverityHigh |