Connectwise Automate vulnerabilities

• connectwise automate The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained... CVE-2026-9089 8.8 HighMay 21, 2026
• connectwise automate Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center CVE-2026-6066 7.1 HighApril 20, 2026
• connectwise automate Self-Update Verification Mechanism Process in ConnectWise Automate CVE-2025-11493 8.8 HighOctober 16, 2025
• connectwise automate HTTP Configuration and Encryption in Transit CVE-2025-11492 Public exploit 9.6 CriticalOctober 16, 2025
• connectwise screenconnect, automate +1 more ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote... CVE-2023-47257 8.1 HighFebruary 1, 2024
• connectwise screenconnect, automate +1 more ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers... CVE-2023-47256 5.5 MediumFebruary 1, 2024
• connectwise automate Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being... CVE-2023-23130 Disputed 5.9 MediumFebruary 1, 2023
• connectwise automate Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and... CVE-2023-23126 Disputed 6.1 MediumFebruary 1, 2023
• connectwise automate An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132. CVE-2021-35066 9.8 CriticalJune 21, 2021
• connectwise automate An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection... CVE-2021-32582 7.5 HighJune 17, 2021
• connectwise automate The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because... CVE-2020-15838 8.8 HighOctober 9, 2020
• connectwise automate ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths,... CVE-2020-15027 9.8 CriticalJuly 16, 2020
• connectwise automate A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A... CVE-2020-15008 7.5 HighJuly 7, 2020
• connectwise automate api By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user... CVE-2020-14159 8.8 HighJune 15, 2020