What is CVE-2026-84869?

CVE-2026-84869 is a critical-severity vulnerability in Connectwise Screenconnect, classified under Improper Privilege Management. CVSS score: 9.9/10. Published 2026-09-08.

How severe is CVE-2026-84869?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Auth bypass in Connectwise Screenconnect

CVE-2026-84869

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

Vulnerability class: Privilege Escalation

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Connectwise Screenconnect — versions All versions prior to 26.6.5

Weakness classification (CWE)

CWE-269 — Improper Privilege Management
CWE-862 — Missing Authorization

References

7d616e1a-3288-43b1-a0dd-0a65d3e70a49
7d616e1a-3288-43b1-a0dd-0a65d3e70a49
7d616e1a-3288-43b1-a0dd-0a65d3e70a49

Frequently asked questions

What is CVE-2026-84869?: CVE-2026-84869 is a critical-severity vulnerability in Connectwise Screenconnect, classified under Improper Privilege Management. CVSS score: 9.9/10. Published 2026-09-08.
How severe is CVE-2026-84869?: Critical severity. CVSS v3 base score is 9.9 out of 10.