脆弱性の種類
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
影響を受ける製品
- connectwise screenconnect
参考情報
- https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869
- https://www.connectwise.com/company/trust/advisories
- https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-84869
- https://www.huntress.com/blog/rogue-screenconnect-installations