ConnectWise patches critical ScreenConnect authentication failure after five days

ConnectWise has released a security update for ScreenConnect to address a critical authentication failure. The vulnerability, identified as CVE-2026-84869, allowed unauthorized file transfers and execution during active remote sessions. Initially warning customers on September 3, the company advised administrators to remove the TransferFiles permission from users with open sessions in ConnectWise Remote Access. This security flaw is now fully patched in ScreenConnect client version 26.6.5 and all subsequent versions to ensure system integrity.