EUVD-2026-74053

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...

CVE-2026-84869

CVE-2026-84869 affects the ScreenConnect client (not the server) and allows files to be transferred and executed through an active remote session without authorization or Host confirmation. The flaw is rated CVSS 9.9 (Critical) with changed scope and high impact across confidentiality, integrity,...

PT-2026-88316

The permanent fix is 26.6.5, but out-of- maintenance on-prem customers may need to renew before they can install it. Temporary mitigation is to disable TransferFiles. Fair enough for features and support. Less sure about paying for a Critical security fix in software already purchased. Curious wh...

ConnectWise ScreenConnect < 25.2.4 RCE

According to its version, the ConnectWise ScreenConnect remote access software installed on the remote host is prior to 25.2.4. It is, therefore affected by a remote code execution vulnerability: - ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection...