{"uuid": "79d830ca-2793-4de5-9e2e-5c53ee676492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117237579021510633", "content": "WTF\nhttps://github.com/ConnectWise-Advisories/Disclosures/blob/main/CVE-2026-84869/README.md\n\nEarlier versions of ScreenConnect Client Support and Access sessions contained a client-side file-transfer handling condition in which file-transfer actions could be processed through an active remote session without proper authorization or Host confirmation. Under certain circumstances, this could allow files to be transferred to and executed on the Host client system, including through elevated execution actions. ScreenConnect servers are not impacted. Disabling file-transfer permissions for affected sessions may reduce exposure until the update is applied.", "creation_timestamp": "2026-09-08T21:38:09.459599Z"}