Vor Kurzem hat der Hersteller ConnectWise über ein empfohlenes ScreenConnect-Update informiert.
Bitte entnehmen Sie der folgenden Hersteller-Nachricht vom 08.09.2026 weitere wichtige Handlungsempfehlungen und den Hotfix für Ihre ScreenConnect-Installation.
Dear ConnectWise Partner,
ConnectWise has issued a Security Bulletin on our Trust Center regarding a security update for ScreenConnect™ versions prior to 26.6.5.
This update addresses a condition in the ScreenConnect client that, under specific circumstances, may allow files to be transferred and executed through an active remote session without authorization or Host confirmation.
This issue requires unauthorized access to a valid ScreenConnect Support or Access session. Threat actors may use various tactics, techniques, and procedures to gain unauthorized access and subsequently misuse file-transfer functionality. ScreenConnect servers are not impacted.
The ScreenConnect 26.6.5 patch includes updates to strengthen client and session handling for file-transfer and file-execution actions.
We strongly recommend that all partners:
- Upgrade to ScreenConnect™ version 26.6.5 as soon as possible.
- Cloud-hosted ScreenConnect instances have been automatically upgraded to the latest version.
- ScreenConnect On-prem partners will need to update manually to 26.6.5. Visit Download | ScreenConnect page to download and apply the update (access requires a valid on-premises license).
- If your renewal is due in 2026, you are eligible to upgrade to 26.6.5 without renewing your license. Be sure to check your “Latest Eligible Version” on the Administration > Overview page to confirm your eligibility for 26.6.5.
- Otherwise, if your license is out of maintenance, you must upgrade your license before installing the latest supported release of ScreenConnect.
- If you are unable to apply the update immediately due to maintenance windows or change-freeze policies, you may temporarily reduce exposure by deselecting the TransferFiles (previously named TransferFilesInSession) permission for all user roles. This is a temporary mitigation only and should be used until the security update can be applied.
- Navigate to the Administration > Security > Roles section.
- Edit a role, review each session group that has permissions assigned to it, and deselect the TransferFiles permission if it is selected.
- Save your changes. Repeat for each role.
- For Automate-integrated ScreenConnect deployments:
- Self-hosted
- Automate partners are eligible to update their integrated on-premises ScreenConnect installation as long as their Automate Assurance subscription is active.
- Automate partners with a ScreenConnect integration should verify that their Automate ScreenConnect Extension is updated to version 7.4.23006.19 before upgrading to ScreenConnect 26.6.5.
- Once the extension is confirmed, partners can visit the Automate Product Updates page to download and apply the ScreenConnect 26.6.5 update.
- After the upgrade, make sure to reinstall your host clients and update your access agents.
- Cloud (HostedRMM)
- The upgrade to ScreenConnect 26.6.5 has already been performed. To verify, navigate to the Administration > Overview page and observe the Version Check box
- Make sure to reinstall your host clients and update your access agents.
- For instructions on updating to the newest release, please reference this doc: Upgrade an on-premise installation - ConnectWise
- Link to release notes: ScreenConnect 26.6 release notes
- Review the Security Bulletin for additional details.
ConnectWise security bulletin
Please refer to the Security Bulletin posted to our Trust Center regarding this vulnerability for more detailed information.