pwned.coffeeUpdated 13 min ago

The menu

Remote access

Operational

Nothing about Remote access is on fire right now. We'd tell you. Probably.

7 spills in 2026 for Remote access

Week of 9 Feb 2026: 1 newWeek of 27 Apr 2026: 1 newWeek of 3 Aug 2026: 2 newWeek of 7 Sept 2026: 2 newWeek of 12 Oct 2026: 1 new
Worst week: 3 Aug 2026, 2 new spills.

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.

Past orders

  1. exploitedKEV overdue 4dcriticalpatched BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. Added to CISA KEV on 2026-10-16 (federal deadline 2026-10-19). CVE-2026-1027642 sources
  2. exploitedhighpatched ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation. Added to CISA KEV on 2026-09-11 (federal deadline 2026-09-14). CVE-2026-848692 sources
  3. exploitedhighpatched N-able N-central Static Code Injection Vulnerability N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution. Added to CISA KEV on 2026-09-08 (federal deadline 2026-09-11). CVE-2026-862183 sources
  4. exploitedhighpatched N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass. Added to CISA KEV on 2026-08-04 (federal deadline 2026-08-07). CVE-2026-185563 sources
  5. exploitedhighpatched N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556. Added to CISA KEV on 2026-08-03 (federal deadline 2026-08-06). CVE-2026-185773 sources
  6. exploitedcriticalpatched ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems. Added to CISA KEV on 2026-04-28 (federal deadline 2026-05-12). CVE-2024-17082 sources
  7. exploitedcriticalpatched BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. CVE-2026-17311 source

More in Enterprise edge

Follow Remote access

RSS: /feed.xml?stack=remote-support. JSON: /incidents.json?stack=remote-support. Or add it to your usual for delivery.