CVE-2026-84869 / ScreenConnect source notes

The Cyber Centre advisory, updated September 11, identifies ScreenConnect versions before 26.6.5 as affected. It records CVE-2026-84869 entering the CISA KEV catalog that day.

Source: ConnectWise advisory AV26-903. The page links the vendor security patch and bulletin index.

I am using this thread to keep references in one place. A KEV entry and a technical root-cause analysis answer different questions. Please label which one a new reference actually supports.

Useful distinction. A report of observed exploitation is evidence about activity, not a substitute for the vendor’s affected-version statement.

I have kept the source summary short for that reason. If the bulletin changes, post the date and the specific claim that changed.