Patchfirst

Vendor

ConnectWise

4 of 5 ConnectWise CVEs in Patchfirst (80%) are in of vulnerabilities exploited in the wild, 2 of them used by ransomware.

CVEs
5
In CISA KEV
480%
Known ransomware use
2
Median days to KEV
20
from publication
Latest KEV listing
11 Sep 2026

Products

In KEVOther CVEs
  • ScreenConnect In KEV: 4 CVEs: 5

Top ATT&CK techniques

What attackers do with ConnectWise CVEs

Counts are ConnectWise CVEs linked to the technique. Each link’s provenance is on the CVE page.

ConnectWise CVEs

5 CVEs, by priority
  1. CVE-2024-1709ConnectWise ScreenConnect Authentication Bypass Vulnerability
    ConnectWise · ScreenConnectKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    >99.9%Top 0.02%
    83.9priority
  2. CVE-2024-1708ConnectWise ScreenConnect Path Traversal Vulnerability
    ConnectWise · ScreenConnectKEVRansomwarePublic exploitHigh · 8.4T1059Command and Scripting Interpreter
    95.4%Top 0.13%
    78.9priority
  3. CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
    ConnectWise · ScreenConnectKEVCritical · 9.9T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    0.9%Top 40%
    67.0priority
  4. CVE-2025-3935ConnectWise ScreenConnect Improper Authentication Vulnerability
    ConnectWise · ScreenConnectKEVHigh · 7.2T1059Command and Scripting Interpreter
    3.6%Top 11%
    60.9priority
  5. CVE-2026-3564ScreenConnect Instance Level Cryptographic Material Exposure
    ConnectWise · ScreenConnectCritical · 9.0
    0.4%Top 69%
    55.2priority
↑ ↓ chooseEnter openEsc close