⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2024-1708

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

ConnectWise ScreenConnect path traversal enabling unauthenticated RCE. Ransomware groups mass-exploited this within 48 hours. Update to 23.9.8+ or take instances offline. If exposed, assume compromise and begin IR immediately.

📋 Official Description

ConnectWise ScreenConnect path traversal allowing unauthenticated code execution via the SetupWizard endpoint.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →