Actively exploited vulnerabilities affecting ConnectWise products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2024-1708https://wildfortech.com/security#CVE-2024-1708This path traversal flaw in ConnectWise ScreenConnect lets attackers break out of intended directory boundaries, potentially executing remote code or accessing sensitive data and critical systems without authorization. Critically, ransomware groups are known to have actively exploited this vulnerability, meaning unpatched systems face a realistic and documented threat of full compromise — not just theoretical risk.Tue, 28 Apr 2026 00:00:00 GMTConnectWiseScreenConnecthttps://wildfortech.com/security#CVE-2025-3935https://wildfortech.com/security#CVE-2025-3935ConnectWise ScreenConnect has an improper authentication flaw that enables ViewState code injection attacks. If an attacker obtains or guesses the application's machine keys, they can craft malicious ViewState payloads and achieve remote code execution on the server. Because ScreenConnect is widely used for remote support and access, a compromised instance effectively hands attackers a foothold into every endpoint managed through it — making this a high-priority risk for any organization running the software.Mon, 02 Jun 2025 00:00:00 GMTConnectWiseScreenConnect