Tag: cve 2026 84869

ScreenConnect Flaw Exploited in MSP Attack Paths

A newly exploited flaw in ScreenConnect, CVE-2026-84869, is being used to turn legitimate support sessions into gateways for massive attacks on multiple customers, with a severity score of 9.9. Security researchers have discovered a toolkit called SCKit that weaponizes this vulnerability and built-in remote management features to spread attacks.