#connectwise

Analysis · May 20, 2026 · Colten Anderson

The other half of the ScreenConnect chain just got a 2026 deadline

CVE-2024-1709 got the CVSS 10 and the headlines in February 2024. The path-traversal half that actually lands code execution, CVE-2024-1708, only got its own KEV deadline on April 28, 2026. Two years late, same chain.