SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-84869

CRITICAL · CVSS 9.9 EPSS 0.69% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the ScreenConnect client allows unauthorized file transfers and execution during active remote sessions, bypassing host confirmation. This critical issue poses significant risks to user systems, potentially leading to unauthorized access or malware deployment. Organizations utilizing the ScreenConnect client should prioritize immediate remediation to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-84869
Severity
CRITICAL
CVSS
9.9
EPSS
0.69%

Original NVD Description

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

Related CVEs

Other vulnerabilities affecting the same vendor(s)