https://patchfirst.co/vendor/connectwise/New and newly exploited ConnectWise CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-84869/CVE-2026-84869#kevFri, 11 Sep 2026 00:00:00 GMTConnectWise · ScreenConnect. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 60.4% of CVEs). CVSS 9.9 CRITICAL. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 67.0 of 100.kevT1078T1059T1105https://patchfirst.co/cve/CVE-2024-1708/CVE-2024-1708#kevTue, 28 Apr 2026 00:00:00 GMTConnectWise · ScreenConnect. In CISA KEV since 2026-04-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.4% (higher than 99.87% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Priority 78.9 of 100.kevransomwarepublic-exploitT1059https://patchfirst.co/cve/CVE-2026-3564/CVE-2026-3564Tue, 17 Mar 2026 00:00:00 GMTConnectWise · ScreenConnect. Not in CISA KEV. EPSS 0.4% (higher than 30.7% of CVEs). CVSS 9.0 CRITICAL. Priority 55.2 of 100.https://patchfirst.co/cve/CVE-2025-3935/CVE-2025-3935#kevMon, 02 Jun 2025 00:00:00 GMTConnectWise · ScreenConnect. In CISA KEV since 2025-06-02. ENISA EUVD lists it as exploited. EPSS 3.6% (higher than 89.4% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1059 Command and Scripting Interpreter. Priority 60.9 of 100.kevT1059https://patchfirst.co/cve/CVE-2024-1709/CVE-2024-1709#kevThu, 22 Feb 2024 00:00:00 GMTConnectWise · ScreenConnect. In CISA KEV since 2024-02-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Named in 1 threat report. Priority 83.9 of 100.kevransomwarepublic-exploitT1190T1078