ScreenConnect-UserEnum

ScreenConnect-UserEnum ConnectWise also known as ScreenConnect has a userenum vulnerability. This is an user enumeration tool for that CVE-2019-16516 vulnerable = 19.2.24707 ??? didn't really understand if they fixed in upper version...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 and CVE-2024-1709 A Proof of Concept developed by @watchTowr to exploit an authentication bypass to add a new administrative user in ConnectWise ScreenConnect. This is the first step in a trivial Remote Command Execution chain. Follow the watchTowr Labs Team for our Security Researc...

CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

ConnectWise ScreenConnect: Authentication Bypass Introduction This project aims to exploit an authentication bypass vulnerability in ConnectWise ScreenConnect. It provides a script to demonstrate the exploit. Please ensure you have the necessary permissions before attempting to use this script...

cve-2024-1708-connectwise_rce_reproduction

CVE-2024-1708 / CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass & Remote Code Execution CVSS Score: 8.4 CVE-2024-1708 – 10.0 CVE-2024-1709 CWE: CWE-22 Path Traversal, CWE-288 Authentication Bypass Using an Alternate Path Affected Software: ConnectWise ScreenConnect formerly...

ConnectWise ScreenConnect <= 23.9.7 - Path Traversal

ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 e CVE-2024-1709 Una prova di concetto sviluppata da @watchTowr per sfruttare un bypass dell'autenticazione al fine di aggiungere un nuovo utente amministrativo in ConnectWise ScreenConnect. Questo è il primo passo di una banale catena di esecuzione remota di comandi. Segui il team d...

ConnectWise ScreenConnect Guest Transfer (CVE-2026-84869)

Targets CVE-2026-84869 in ScreenConnect before 26.6.5.9742: guest file transfer without Host confirmation during active sessions. Validates vulnerable build markers and probes guest-accessible transfer endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """ConnectWise ScreenConnect guest file...

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management RMM software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360 installe...

Phishing Abuses RMM Tools for Persistent Access

In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Learn More In July 2026, Microsoft Defender Experts observed phishing campaigns targeting organizations across multiple industries that distributed a masqueraded MSP360 Remote Monitoring and Management RMM installer...

ConnectWise ScreenConnect CVE-2026-84869 Detect

Detects ScreenConnect server deployments likely serving vulnerable client builds before 26.6.5.9742 CVE-2026-84869: guest file transfer without Host confirmation during active sessions. Parses version markers from Login/Host pages and flags releases below 26.6.5. !/usr/bin/env python3 -- coding:...

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. Details of the...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-84869...

ConnectWise ScreenConnect < 26.6.5 Missing Authorization

According to its version, the ConnectWise ScreenConnect remote access software installed on the remote host is prior to 26.6.5. It is, therefore, affected by a missing authorization vulnerability: - A condition in the ScreenConnect client may allow files to be transferred and executed through an...

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation...

CVE-2026-84869

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...

CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...

EUVD-2026-74053

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...

CVE-2026-84869

CVE-2026-84869 affects the ScreenConnect client (by ConnectWise). A condition in the client allows a guest to transfer and execute files on the host through an active remote session without proper authorization or Host confirmation, as described in the CVELIST record title. ScreenConnect servers ...

CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...

VulnCheck KEV: CVE-2026-84869

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation...