CVE-2026-84869 is a missing authorization and improper privilege management vulnerability in ScreenConnect that permits attackers to transfer and execute files without host confirmation during active remote sessions. Exploitation has been o

Curate Feeds | Make Collections | Customize Email Briefs

Curate Feeds | Make Collections | Customize Email Briefs

ConnectWise has issued a security update for ScreenConnect, five days after warning customers the product could allow files to be transferred and executed through active remote sessions without authorization or confirmation. The company warned customers on Sept. 3 of the problem with support and access sessions in ConnectWise Remote Access, advising admins to log in and remove the “TransferFiles” permission from any users with an open session. The vulnerability, tracked as CVE-2026-84869, has been patched in the ScreenConnect client version 26.6.5 onwards. Last month ConnectWise took the opportunity to reassure customers at its IT Nation Connect Asia Pacific conference that it was getting back on track after a “nation-state attack” in May 2025 that had affected several customers. The company quickly released a patch for that attack and said no customers had suffered loss. This was not the first time that the company had suffered from a cyberattack. In 2024, ConnectWise had to issue a patch after reports that ScreenConnect had been exploited. _This story first appeared on Computerworld._

ConnectWise has issued a security update for ScreenConnect, five days after warning customers the product could allow files to be transferred and executed through active remote sessions without authorization or confirmation. The company warned customers on Sept. 3 of the problem with support and access sessions in ConnectWise Remote Access, advising admins to log in and remove the “TransferFiles” permission from any users with an open session. The vulnerability, tracked as CVE-2026-84869, has been patched in the ScreenConnect client version 26.6.5 onwards. Last month ConnectWise took the opportunity to reassure customers at its IT Nation Connect Asia Pacific conference that it was getting back on track after a “nation-state attack” in May 2025 that had affected several customers. The company quickly released a patch for that attack and said no customers had suffered loss. This was not the first time that the company had suffered from a cyberattack. In 2024, ConnectWise had to issue a patch after reports that ScreenConnect had been exploited.

#TeamBlimpki - !socials !throne !so !clip !lurk !transferfiles @user | Streaming overwatch.

Oh You Wanna Fight???? - !socials !so !clip !transferfiles

Babies??? Yeah - !socials !so !clip !transferfiles

I wanna romance everyone? - !socials !so !clip !dailyhack !transferfiles

Cweature Catcher? - !socials !so !clip !dailyhack !transferfiles

BIGLOCKE - !socials !so !clip !dailyhack !transferfiles

Overwartch - !socials !so !clip !dailyhack !transferfiles

Activating Parisian Persuasion Techniques! - !dailyhack !transferfiles !clip