Advisories · Technology

ConnectWise PSA.

Every CVE that names ConnectWise PSA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0696 CVE record

CVSS 6.5 Medium

Session Cookies Missing HttpOnly Attribute
- ConnectWise PSA
- CWE-1004
Not analysed yet 16 Jan 2026
CVE-2026-0695 CVE record

CVSS 8.7 High

Stored XSS in Time Entry Audit Trail
- ConnectWise PSA
- Cross-site scripting (XSS)
Not analysed yet 16 Jan 2026
CVE-2025-7204 CVE record

CVSS 6.5 Medium

Exposure of password hashes via API responses in ConnectWise PSA
- ConnectWise PSA
- Information disclosure
Not analysed yet 9 Jul 2025