ConnectWise ScreenConnect CVE-2024-1708 Path Traversal Attempt

Ankit Mehta@Secvyn

•updated Sep 25, 2026•1•0•10

This rule detects an exploitation attempt targeting the ConnectWise ScreenConnect Path Traversal vulnerability (CVE-2024-1708). The detection monitors incoming HTTP traffic for attempts to traverse the file system by inspecting the URI for repeated '..' sequences within the '/App_Extensions/' directory, a hallmark of this vulnerability.