Critical ConnectWise RMM Bug Poised for Exploitation Avalanche

ConnectWise ScreenConnect has a critical authentication bypass (CVSS 10) and a secondary path-traversal flaw that are being actively exploited after public proof-of-concept disclosures; roughly 3,800 self-hosted instances (~93%) remain vulnerable, enabling attackers to create administrative accounts and potentially execute large-scale compromises or supply-chain attacks against MSPs/MSSPs. ConnectWise published advisories and IoCs, and operators are urged to upgrade to version 23.9.8 immediately and hunt for signs of compromise.