ConnectWise Automate Flaw Allows Hackers to Evade Security Controls

Gbhackers •Divya • May 26, 2026

ConnectWise has released a security update to address a high-severity vulnerability in its ConnectWise Automate remote monitoring and management (RMM) platform, a widely used tool for managed service providers (MSPs). The flaw, tracked as CVE-2026-9089, carries a CVSS score of 8.8 and could allow attackers to bypass integrity verification mechanisms, potentially enabling unauthorized code execution […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ConnectWise Automate Vulnerability Allows Code Execution Bypass ConnectWise has issued a security update for a high-severity vulnerability in its Automate platform, tracked as CVE-2026-9089. This flaw, with a CVSS score of 8.8, enables attackers to bypass integrity verification mechanisms, potentially allowing unauthorized code execution. Affected versions are those prior to 2026.5, which are widely used by managed service providers (MSPs). The vulnerability was published on May 21, 2026, and poses significant risks to organizations relying on this remote monitoring and management tool. Users are advised to update their systems immediately to mitigate potential exploitation. 2 sources 71

Extracted Entities

CVEs (1)

CVE-2026-9089

Platforms (1)

ConnectWise Automate