ConnectWise
IT management software vendor and maker of ScreenConnect remote support.
CISA's exploited-flaw catalogue held four ConnectWise ScreenConnect flaws by 8 October 2026; the newest, CVE-2026-84869, was listed on 11 September 2026, three days after CISA listed a flaw in N-able's N-central console.
Last refreshed: 12 October 2026
Why do attackers keep coming back to ConnectWise ScreenConnect?
Timeline for ConnectWise
Mentioned in: CISA flags N-central flaw as exploited
Cybersecurity: Threats and DefencesBackground
ConnectWise sells IT management software to managed service providers, the firms that run computers on behalf of client businesses. Its ScreenConnect product gives technicians remote support and access, and customers can host it on their own servers or use the ConnectWise cloud service.
ScreenConnect's worst episode came in February 2024. ConnectWise disclosed CVE-2024-1709, an authentication bypass, and CISA listed it as exploited on 22 February 2024, noting known ransomware use. ConnectWise shipped version 23.9.8 for on-premises servers, patched cloud instances itself and lifted licence limits so customers with lapsed maintenance could still upgrade.
A ScreenConnect server, like N-able's N-central console, can reach every client machine it manages. CISA's catalogue held four ScreenConnect entries by 8 October 2026; the newest, CVE-2026-84869, arrived on 11 September 2026, in the same week CISA listed the N-central flaw.