CISA Warns of ConnectWise ScreenConnect Vulnerability Exploited in Attacks

**Executive summary:** CISA has added CVE-2024-1708—a path traversal vulnerability in ConnectWise ScreenConnect—to its Known Exploited Vulnerabilities list and confirmed active exploitation; the flaw can allow remote code execution and unauthorized access, posing high risk of data theft or ransomware, and federal agencies must remediate by May 12, 2026.