CVE-2026-84869

CriticalKnown Exploited

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without…

ConnectWise·CWE-862·Published 2026-09-08

CVSS

9.9

EPSS

0.01

KEV

Yes

Exploits

cve.orgen

228 chars

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

NVDen

228 chars

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.9	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
3.1	Secondary	NVD	9.9	3.1	6.0	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	9.9	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H