{"uuid": "3ad1a89c-576b-4031-a65a-74c7b21cb4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://t.me/pphm_HackerNews/3139", "content": "\ud83d\udd34 ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks\n\nConnectWise has released urgent patches for a critical-severity vulnerability in the ScreenConnect remote access and support software that has been exploited in worm-like attacks.\n\nTracked as CVE-2026-84869 (CVSS score of 9.9/10), the security defect is described as a missing authorization and improper privilege management issue.\n\nThe bug creates \u201ca condition in the ScreenConnect client that may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances,\u201d ConnectWise explains in its advisory.", "creation_timestamp": "2026-09-17T11:00:04.527891Z"}