Skip to content
OpenAdvisories

Product · ConnectWise

Automate

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2025-11492 Public exploit

    HTTP Configuration and Encryption in Transit

    In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the enc…

    ConnectWise Automate