ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

Description

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

Affected Products

Vendor	Product	Versions
ConnectWise	ScreenConnect	All versions prior to 26.6.5

References

Related News (3 articles)

Tier D

CSO Online4h ago

ConnectWise patches critical ScreenConnect authentication failure after five days

→ No new info (linked only)

Tier B

CCCS Canada2d ago

ConnectWise security advisory (AV26-903)

→ No new info (linked only)

Tier C

VulDB3d ago

CVE-2026-84869 | ConnectWise ScreenConnect Client privileges management

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.9 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA KEV✅ Yes

Actively exploited✅ Yes

CWECWE-862, CWE-269

PublishedSep 8, 2026

Last enriched3d ago

Trending Score132🔥

Source articles3

Independent3

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

Description

Affected Products

References

Related News (3 articles)

Discussion (0)

Community Vote

Pin to Dashboard

Verification

Vulnerability Timeline