Login Request a demo
AU
Product
Automate
by ConnectWise · last CVE May 21, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 6Medium 3Low 0
Severity
All severities11Critical2High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Automate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-9089
8.8
0%
May 21
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations
Affected: All versions prior to 2026.5
CVE-2020-15838
8.8
1%
Oct 9
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions
Affected: before 2020.8
CVE-2023-47257
8.1
1%
Feb 1
ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages
Affected: All versions, or not specified
CVE-2025-11493
7.5
0%
Oct 16
Self-Update Verification Mechanism Process in ConnectWise Automate
Affected: All versions prior to 2025.9
CVE-2025-11492
7.5
0%
Oct 16
HTTP Configuration and Encryption in Transit
Affected: All versions prior to 2025.9
CVE-2026-6066
7.1
0%
Apr 20
Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center
Affected: All versions prior to 2026.4
Showing 6