Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

ConnectWise ScreenConnect Remote Access file-transfer mitigation

Advisory/Mitigation
First reported
Last updated
Happening score
H score 57
1 unique sources, 1 articles

Summary

Hide ▲

ConnectWise issued temporary mitigation steps for a ScreenConnect Remote Access file-transfer flaw affecting cloud and on-premises deployments. Administrators are told to remove the TransferFiles permission, or TransferFilesInSession on legacy setups, to reduce attack exposure. The issue has no CVE yet, so the advisory is the main protection until the permanent fix later this week.

Related Happenings

ScreenConnect Remote Access file-transfer security flaw

Vulnerability
H score48 First: 07.09.2026 13:06 Last: 07.09.2026 13:06 Sources 1

How related: ConnectWise has identified an issue affecting file transfer behavior in ScreenConnect® Remote Access Support and Access sessions,

About this happening: The ScreenConnect Remote Access file-transfer vulnerability affects cloud and on-premises deployments and puts Support and Access sessions at risk. ConnectWise has...

Open Happening

Citrix NetScaler ADC/Gateway memory overflow flaw (CVE-2026-8452)

Vulnerability
H score34 First: 27.08.2026 12:16 Last: 27.08.2026 12:16 Sources 1

About this happening: CVE-2026-8452 is an actively exploited memory overflow flaw in Citrix NetScaler ADC and NetScaler Gateway appliances, including systems configured with Gateway V...

Open Happening

PAN-OS User-ID Authentication Portal mitigation guidance (CVE-2026-0300)

Advisory/Mitigation
H score77 First: 06.05.2026 09:14 Last: 06.05.2026 09:14 Sources 1

About this happening: Palo Alto Networks issued mitigation guidance for CVE-2026-0300 after the PAN-OS User-ID Authentication Portal flaw was reported exploited in the wild, leaving pub...

Open Happening

ScreenConnect cryptographic signature verification vulnerability (CVE-2026-3564)

Vulnerability
H score26 First: 18.03.2026 20:10 Last: 18.03.2026 20:10 Sources 1

About this happening: ConnectWise disclosed CVE-2026-3564, a cryptographic signature verification vulnerability in ScreenConnect that can enable unauthorized access and privilege esca...

Open Happening

ConnectWise security patch release for CVE-2026-3564

Security Patch Release
H score29 First: 18.03.2026 20:10 Last: 18.03.2026 20:10 Sources 1

About this happening: ConnectWise released ScreenConnect 26.1 to harden machine key handling after disclosing CVE-2026-3564, a flaw that can enable unauthorized access and privilege e...

Open Happening

Timeline

  1. 07.09.2026 13:06 2 articles · 0h ago

    ConnectWise issues temporary mitigation for ScreenConnect file-transfer flaw

    Mitigation Patch Update

    ConnectWise identified an issue affecting file transfer behavior in ScreenConnect Remote Access Support and Access sessions and provided temporary mitigation steps while it works on a permanent fix. Administrators are told to remove the TransferFiles permission, or TransferFilesInSession for legacy setups, from session groups across cloud and on-premises deployments. The company said the permanent fix is planned later this week, and Shadowserver said nearly 6,000 ScreenConnect instances are exposed online.

    Show sources
    Open in new tab