ConnectWise ScreenConnect vulnerabilities

Latest ConnectWise ScreenConnect CVEs

Newest publication first

1. CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

   Published 2026-09-08

   Critical·CVSS 9.9 EPSS 0.92% CISA KEV added 2026-09-11 Exploited in the wild

   A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

2. CVE-2026-11596 In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a tok...

   Published 2026-06-10

   Medium·CVSS 4.7 EPSS 0.24%

   In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated acc...

3. CVE-2026-3564 ScreenConnect Instance Level Cryptographic Material Exposure

   Published 2026-03-17

   Critical·CVSS 9.0 EPSS 0.40%

   A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not i...

4. CVE-2025-14823 Certificate Signing Extension Returns Encrypted Values

   Published 2025-12-18

   Medium·CVSS 5.3 EPSS 0.15%

   In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and...

5. CVE-2025-14265 Improper server-side validation in ScreenConnect extension framework

   Published 2025-12-11

   Critical·CVSS 9.1 EPSS 0.37%

   In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the installation and execution of untrusted or arbitrary extensions by authorized or administrative users. Abuse of this behavior could result in th...

6. CVE-2025-3935 ScreenConnect Exposure to ASP.NET ViewState Code Injection

   Published 2025-04-25

   High·CVSS 7.2 EPSS 3.6% CISA KEV added 2025-06-02 Exploited in the wild

   ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. It is important to note that to obtain these m...

7. CVE-2024-1709 Authentication bypass using an alternate path or channel

   Published 2024-02-21

   Critical·CVSS 10.0 EPSS 100.0% CISA KEV added 2024-02-22 Ransomware Exploited in the wild Framework module PoC

   ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

8. CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)

   Published 2024-02-21

   High·CVSS 8.4 EPSS 95.4% CISA KEV added 2026-04-28 Ransomware Exploited in the wild Framework module PoC

   ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

9. CVE-2023-47257 ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages.

   Published 2024-02-01

   High·CVSS 8.1 EPSS 1.0%

   ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages.

10. CVE-2023-47256 ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings

    Published 2024-02-01

    Medium·CVSS 5.5 EPSS 0.45%

    ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings

11. CVE-2022-36781 ConnectWise - ScreenConnect Session Code Bypass

    Published 2022-09-28

    Medium·CVSS 5.3 EPSS 0.63%

    ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repea...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.