CISA Warns ConnectWise ScreenConnect Vulnerability Actively Exploited in Attacks

CISA issued an urgent alert that CVE-2024-1708, a path traversal vulnerability in ConnectWise ScreenConnect, is being actively exploited in the wild and has been added to the Known Exploited Vulnerabilities catalog; the advisory warns that unauthenticated attackers can access sensitive files or execute code, potentially enabling full system compromise, lateral movement, ransomware deployment, or supply-chain style impact on MSP clients, and mandates federal remediation by May 12, 2026 while recommending immediate patching and mitigations for all organizations.