CVE Watch—

CVE-2024-1708

ConnectWise ScreenConnect Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

87.6%

p100

KEV

YES

Apr 28, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

87.6%EPSS · 30 days87.6%

2026-06-302026-07-16

KEV catalog record

Product

ConnectWise / ScreenConnect

Vulnerability

ConnectWise ScreenConnect Path Traversal Vulnerability

Added to KEV

Apr 28, 2026

Remediate by

May 12, 2026

Known ransomware use

Yes

Summary description

ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1708

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-1709—

100.0%

KEV—80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2025-3935—

87.4%

KEV—76ConnectWise ScreenConnect Improper Authentication Vulnerability—