CVE-2026-9089 | BDVDB-2026-334338 Detail
ConnectWiseAutomate
Description#
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.
Impact#
CAPEC-186 Malicious Software Update
Weaknesses#
- CWE-494 Download of code without integrity check
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.