Vendors and CVEs › CVEs › CVE-2026-84869
CVE-2026-84869: what it is, who is affected and what to do
Blackpoint Cyber reports the campaign against ConnectWise ScreenConnect exploits CVE-2026-84869 (CVSS 9.9), a now-patched flaw. It is not a new vulnerability. The recovered attacker toolkit, called SCKit, could turn support sessions into attack paths into managed service provider customers.
- Known exploited. Yes, on CISA’s list of exploited flaws.
- CVSS. 9.9, as the source states.
- Records. CVE-2026-84869 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High Known exploited
New detail: ScreenConnect attacks use a patched flaw, not a new one
Blackpoint Cyber reports the campaign against ConnectWise ScreenConnect exploits CVE-2026-84869 (CVSS 9.9), a now-patched flaw. It is not a new vulnerability.