CVE-2021-35066: ConnectWise Automate

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.

Affected products

• ConnectWise Automate: before 2021.0.6.132 (fixed in 2021.0.6.132)

Published 2021-06-21. Last modified 2026-06-17.