sign in--:--:--UTC

CVE-2024-1708

exploited in the wild☆ pin

CVSS

—

Reports

6

First seen

Feb 21, 2024

Last seen

Oct 9, 2026

Affected product

ConnectWise ScreenConnect versions below 23.9.8

Associated actors

BlackCat ×1 Medusa ×1

Recent reports

Working Exploit Published for Pre-Auth AnyDesk Linux RCE Flaw (CVE-2024-1708)

The Hacker NewsOct 9, 2026 High

China-Linked Storm-1175 Deploys StormEncryptor Ransomware via N-central Flaw

The Hacker NewsAug 10, 2026 Critical

SlashAndGrab ConnectWise ScreenConnect Authentication Bypass Vulnerability

Huntress BlogAug 3, 2024 High

BlackCat Ransomware Affiliate TTPs and ScreenConnect Exploitation

Huntress BlogFeb 28, 2024 Critical

Guide: How to Know if your ScreenConnect Server is Hacked

Huntress BlogFeb 23, 2024 Critical

ConnectWise ScreenConnect CVE-2024-1709 & CVE-2024-1708 Authentication Bypass and Path Traversal

Huntress BlogFeb 21, 2024

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans