ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

CVE-2026-84869 affects ConnectWise ScreenConnect and involves both improper privilege management and missing authorization vulnerabilities. The flaw allows an attacker to perform file transfer and execution through active remote sessions without proper authorization or host confirmation. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog and is subject to BOD 26-04 remediation requirements. Organizations using ScreenConnect are urged to apply security updates as prioritized by CISA guidance. ConnectWise published a security bulletin on 2026-09-08 addressing this issue. The vulnerability poses a significant risk as it can be exploited during legitimate remote sessions, bypassing host controls. CISA has also issued forensic triage requirements for affected systems under BOD 26-04 implementation guidance.