CVE-2026-9089High 8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.0.3%
CVE-2026-6066High 7.1Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center<0.1%
CVE-2025-11493High 8.8Self-Update Verification Mechanism Process in ConnectWise Automate0.2%
CVE-2025-11492Critical 9.6HTTP Configuration and Encryption in Transit0.2%