CISA Adds ConnectWise ScreenConnect Path Flaw and Windows Shell Bug

incidentclosedApr 28, 2026 — Apr 29, 2026

According to CISA, Windows Shell and ConnectWise ScreenConnect flaws have been added to the Known Exploited Vulnerabilities (KEV) catalog. The entries include CVE-2024-1708, a ConnectWise ScreenConnect Path Traversal Vulnerability (CVSS 8.4) affecting versions 23.9.7 and earlier, and CVE-2026-32202, a Microsoft Windows Protection Mechanism Failure…

CVE-2026-21510 8.8 KEV CVE-2026-21513 8.8 KEV CVE-2024-1708 8.4 KEV CVE-2026-32202 4.3 KEV APT28

Root sourcewww.cisa.gov

Timeline Coverage

Swipe to explore timeline

#4 Apr 29, 2026, 08:31 AM

securityaffairs.com
CISA Adds ConnectWise ScreenConnect Path Flaw and Windows Shell Bug
#3 Apr 28, 2026, 08:13 PM

cisa.gov
CISA Warns of Active Windows Shell Spoof Flaw CVE-2026-32202
#2 Apr 28, 2026, 08:12 PM

cisa.gov
CISA Flags Critical ScreenConnect Flaw CVE‑2024‑1708 as Exploited
#1 Apr 28, 2026, 07:21 AM

thehackernews.com
Microsoft Warns of Active Exploit in CVE-2026-32202 Spoof Flaw