CVE-2026-84869 actively exploited: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

CISA added CVE-2026-84869, a privilege escalation in ConnectWise ScreenConnect, to its Known Exploited Vulnerabilities catalogue. It may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation. Federal agencies must remediate by September 14, 2026.