ConnectWise Warns of New ScreenConnect Remote Access Flaw

Cybersecuritynews •Abinaya • September 7, 2026

ConnectWise has warned customers a newly identified security issue affecting file transfer behavior in ScreenConnect Remote Access Support and Access sessions. The issue impacts both cloud-hosted and on-premises ScreenConnect deployments, and the company has released interim mitigation guidance while it develops a permanent fix. The advisory, published on September 3, 2026, does not yet […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New ScreenConnect Flaw Enables Malware Spread via Rogue Clients ConnectWise has identified a critical vulnerability in ScreenConnect Remote Access affecting both cloud and on-premises deployments. The flaw, which impacts file transfer functionality, allows attackers to deploy rogue ScreenConnect clients that spread malware to connected systems. This malware is propagated through social engineering tactics, leading to the installation of modified clients that execute VBScript files for malicious purposes. Currently, ConnectWise is working on a patch and has advised administrators to disable file transfers as a temporary mitigation measure. The vulnerability has not yet been assigned a CVE identifier, but it is being actively exploited in the wild. Cybersecurity firm Huntress has documented the attack method, which includes creating abnormal Windows Script Host processes and modifying registry keys. Administrators are urged to review audit logs and reimage compromised machines. The situation remains urgent as the exploit is confirmed to be in use. 15 sources 74

ConnectWise Warns of New ScreenConnect Remote Access Flaw

The full story

Extracted Entities

Companies (1)

Tools (1)