ConnectWise new ScreenConnect flaw without patch

Ankit Mehta@Secvyn

•updated Sep 7, 2026•0•0•1

Detects suspicious file transfer and subsequent execution activity associated with the ScreenConnect (ConnectWise Control) remote access application, which may indicate exploitation of file-transfer vulnerabilities. The rule monitors for ScreenConnect processes dropping executable or script files to disk followed by the spawning of command interpreters to execute those files.