CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise ScreenConnect has a vulnerability that allows attackers to transfer files and run code through remote sessions without proper authorization checks. This happens because the software doesn't properly manage user permissions (improper privilege management, where access controls aren't correctly enforced) and is missing authorization checks (verification that users should be allowed to do what they're attempting). This vulnerability is currently being actively exploited by attackers.