SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-6066

HIGH · CVSS 7.1 EPSS 0.08%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-04-20 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.1. See the original NVD description below for full technical details.

CVE
CVE-2026-6066
Severity
HIGH
CVSS
7.1
EPSS
0.08%

Original NVD Description

ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-server communications could occur without transport-layer encryption. This could allow network‑based interception of Solution Center traffic in Automate deployments. The issue has been resolved in Automate 2026.4 by enforcing secure communication for affected Solution Center connections.

Related CVEs

Other vulnerabilities affecting the same vendor(s)