CISA flags actively exploited ScreenConnect flaw

More than 1,000 internet-exposed ConnectWise ScreenConnect instances remain vulnerable while attackers actively exploit CVE-2026-84869, a critical authorization flaw. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog and ordered U.S. federal agencies to secure affected systems within three days.
Source

👉@sysadminoff

https://4sysops.com/archives/cisa-flags-actively-exploited-screenconnect-flaw/