Login Request a demo
AU
Product
Automate
by ConnectWise · last CVE May 21, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 6Medium 3Low 0
Severity
All severities11Critical2High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Automate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-35066
9.8
1%
Jun 21
An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132
Affected: before 2021.0.6.132
CVE-2020-15027
9.8
1%
Jul 16
ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts
Affected: before 2019.12; 2020.0 through 2020.7
CVE-2026-9089
8.8
0%
May 21
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations
Affected: All versions prior to 2026.5
CVE-2020-15838
8.8
1%
Oct 9
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions
Affected: before 2020.8
CVE-2023-47257
8.1
1%
Feb 1
ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages
Affected: All versions, or not specified
CVE-2025-11493
7.5
0%
Oct 16
Self-Update Verification Mechanism Process in ConnectWise Automate
Affected: All versions prior to 2025.9
CVE-2025-11492
7.5
0%
Oct 16
HTTP Configuration and Encryption in Transit
Affected: All versions prior to 2025.9
CVE-2026-6066
7.1
0%
Apr 20
Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center
Affected: All versions prior to 2026.4
CVE-2023-23126
6.1
0%
Feb 1
Connectwise Automate 2022.11 is vulnerable to Clickjacking
Affected: 2022.11
CVE-2023-23130
5.9
0%
Feb 1
Connectwise Automate 2022.11 is vulnerable to Cleartext authentication
Affected: 2022.11
CVE-2023-47256
5.5
0%
Feb 1
ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings
Affected: All versions, or not specified
Showing 11