12 September 2026
Reference: CVE-2026-84869
1. What is being reported?
The ScreenConnect client software has a flaw where, under certain conditions, files can be sent and executed on a computer during a remote support session without the host's permission or confirmation. This issue affects the client side only, not the servers running the software.
2. What this means in plain English
If your organisation uses ScreenConnect for remote support, attackers could potentially use this flaw to run harmful files on your devices without you knowing. This could lead to data loss, ransomware, or other cyberattacks.
3. Could this affect a small business?
Small businesses, charities, clubs, or trustees using ConnectWise ScreenConnect on their computers could be at risk. If you do not use this software, or only use the server side, you are unlikely to be affected.
4. What to do now
- Check if your organisation uses ConnectWise ScreenConnect client software on any devices.
- Contact your IT provider or software supplier immediately to confirm if updates or mitigations are available.
- Apply any recommended security updates or follow vendor instructions to reduce risk as soon as possible.
- If no fix is available, consider discontinuing use of the ScreenConnect client until it is safe.
5. Ask your IT provider
Can you confirm if our ConnectWise ScreenConnect client software is affected by CVE-2026-84869, and what steps are being taken to protect us from this known exploited vulnerability?
6. Bottom line
If you use ConnectWise ScreenConnect, act now to secure your systems against this critical and actively exploited vulnerability.
Information based on CISA KEV, NVD and reputable security reporting.