VulnSocial

CVE-2026-0695Patch(connectwise / professional_service_automation)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch connectwise professional_service_automation systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In ConnectWise PSA versions older than 2026.1, Time Entry notes stored in the Time Entry Audit Trail may be rendered without applying output encoding to certain content. Under specific conditions, this may allow stored script code to execute in the context of a user’s browser when the affected content is displayed.

connectwise CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • professional_service_automation

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
connectwise
Products
professional_service_automation

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-23: 1Patch / Workaround · 2026-02-23: 1Technical Details · 2026-02-23: 102-23
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Komodo Cyber Security@Komodosec
    Patch

    #VulnerabilityReport #ConnectWisePSA CVE-2026-0695: High-Severity XSS Flaw Patched in ConnectWise PSA 2026.1 https://securityonline.info/cve-2026-0695-high-severity-xss-flaw-patched-in-connectwise-psa-2026-1/?utm_source=dlvr.it&utm_medium=twitter

    Post summary

    ConnectWise PSA 2026.1 has patched a high‑severity XSS flaw (CVE‑2026‑0695). No PoC or exploitation details are provided.

    0001055
    1.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appconnectwiseprofessional_service_automation---

Explore more

Back to dashboardconnectwise CVEsprofessional_service_automation vulnerabilities