ConnectWise Patches Severe Code Execution Flaw in Automate

ConnectWise disclosed a high-severity vulnerability (CVE-2026-9089) in ConnectWise Automate where components can be loaded without full integrity verification, enabling potential execution of malicious binaries; the issue has a CVSS base score of 8.8. Cloud instances were auto-updated by the vendor, while on-premises customers must apply the 2026.5 patch within 30 days to mitigate the risk.