CVE Watch—

CVE-2024-1708

ConnectWise ScreenConnect Path Traversal Vulnerability

CVSS

—

Sem CVSS

EPSS

95.4%

p100

KEV

SIM

28 de abr. de 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

95.4%EPSS · 30 dias95.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

ConnectWise / ScreenConnect

Vulnerabilidade

ConnectWise ScreenConnect Path Traversal Vulnerability

Adicionado ao KEV

28 de abr. de 2026

Corrigir até

12 de mai. de 2026

Uso conhecido em ransomware

Sim

Descrição resumida

ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1708

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-848699.9 CRÍ

60.6%

KEV—68ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability55d CVE-2024-1709—

100.0%

KEV—80ConnectWise ScreenConnect Authentication Bypass Vulnerability—CVE-2025-3935—

89.5%

KEV—77ConnectWise ScreenConnect Improper Authentication Vulnerability—