CVE Watch—

CVE-2024-1708

ConnectWise ScreenConnect Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

95.4%

p100

KEV

YES

Apr 28, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

95.4%EPSS · 30 days95.5%

2026-09-162026-10-14

KEV catalog record

Product

ConnectWise / ScreenConnect

Vulnerability

ConnectWise ScreenConnect Path Traversal Vulnerability

Added to KEV

Apr 28, 2026

Remediate by

May 12, 2026

Known ransomware use

Yes

Summary description

ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1708

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-848699.9 CRI

59.6%

KEV—68ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability33d CVE-2024-1709—

100.0%

KEV—80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2025-3935—

89.0%

KEV—77ConnectWise ScreenConnect Improper Authentication Vulnerability—