PT-2026-3252 · Connectwise · Connectwise Psa

Petar Sever · Publicado 2026-01-16 · Atualizado 2026-01-27 · CVE-2026-0696

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ConnectWise PSA versions prior to 2026.1

Description Certain session cookies were not configured with the HttpOnly attribute in affected versions. This could potentially allow client-side scripts to access session cookie values.

Recommendations Update to version 2026.1 or later.

Correção

Enumeração de Fraquezas

CWE-1004

Identificadores relacionados

CVE-2026-0696

Produtos afetados

Connectwise Psa

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-0696 · Nota de Segurança
• https://reddit.com/r/msp/comments/1qeiaag/connectwise_psa_20261_security_fix · Publicação no Reddit
• https://osv.dev/vulnerability/CVE-2026-0696 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2012303248368222697 · Publicação no Twitter
• https://themissinglink.com.au/security-advisories/cve-2026-0696 · Nota
• https://connectwise.com/company/trust/security-bulletins/2026-01-15-psa-security-fix · Aviso do Fabricante
• https://t.me/cveNotify/149981 · Publicação no Telegram