CVE Watch—

CVE-2024-1708

ConnectWise ScreenConnect Path Traversal Vulnerability

CVSS

—

Sin CVSS

EPSS

95.4%

p100

KEV

SÍ

28 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

95.4%EPSS · 30 días95.5%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

ConnectWise / ScreenConnect

Vulnerabilidad

ConnectWise ScreenConnect Path Traversal Vulnerability

Añadido a KEV

28 abr 2026

Remediar antes de

12 may 2026

Uso conocido en ransomware

Sí

Descripción resumida

ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1708

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-848699.9 CRÍ

59.6%

KEV—68ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability33d CVE-2024-1709—

100.0%

KEV—80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2025-3935—

89.0%

KEV—77ConnectWise ScreenConnect Improper Authentication Vulnerability—