ConnectWise PSA

• CVE-2026-0696 Medium 6.5 Session Cookies Missing HttpOnly Attribute 0.4%
• CVE-2026-0695 High 8.7 Stored XSS in Time Entry Audit Trail 0.3%
• CVE-2025-7204 Medium 6.5 Exposure of password hashes via API responses in ConnectWise PSA 0.4%