CISA Warns of ConnectWise ScreenConnect Vulnerability Exploited in Attacks

Cybersecuritynews •Abinaya • April 30, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a severe vulnerability in ConnectWise ScreenConnect. On April 28, 2026, CISA officially added this flaw, tracked as CVE-2024-1708, to its Known Exploited Vulnerabilities (KEV) catalog. This alert confirms that malicious threat actors are currently abusing this bug to breach networks. ConnectWise […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in ConnectWise ScreenConnect Exploited in Active Attacks ConnectWise ScreenConnect has been compromised by two critical vulnerabilities, CVE-2024-1708 and CVE-2024-1709, which allow attackers to bypass authentication and execute remote code. The vulnerabilities were disclosed on February 19, 2024, with CVE-2024-1709 rated critical (CVSS 10.0) for authentication bypass, and CVE-2024-1708 rated high (CVSS 8.4) for path traversal. Attackers can exploit these vulnerabilities to gain unauthorized access and execute malicious code on affected systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-1708 to its Known Exploited Vulnerabilities (KEV) catalog on April 28, 2026, confirming active exploitation in the wild. Organizations using versions 23.9.7 and earlier must urgently update to version 23.9.8 to mitigate these threats. The vulnerabilities have been linked to ongoing ransomware campaigns, emphasizing the need for immediate action. 9 sources 73

Extracted Entities

CISA Warns of ConnectWise ScreenConnect Vulnerability Exploited in Attacks

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Tools (1)