Updated daily · official sources

Security Radar

Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).

35exploited in the last 30 days

12critical (CVSS ≥ 9)

0used in ransomware

1781in the KEV catalog

CVE-2026-84869 Critical · CVSS 9.9 added on 09/11/2026

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise · ScreenConnect · CWE-269, CWE-862

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.

Want to know if your environment is exposed?

We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.

Talk to a specialist

Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.

This product uses the NVD API but is not endorsed or certified by the NVD.