ScreenConnect vulnerabilities

6 known vulnerabilities in ScreenConnect from ConnectWise. 6 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Exploited

  CVE-2026-84869Sep 8, 2026ConnectWiseEPSS 1.17%

  A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

• 9.0 Critical severity

  ScreenConnect: Improper Verification of Cryptographic Signature

  CVE-2026-3564Mar 17, 2026ConnectWise

  A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest cli

• 9.1 Critical severity

  ScreenConnect: Download of Code Without Integrity Check

  CVE-2025-14265Dec 11, 2025ConnectWise

  In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the installation and execution of untrusted or arbitrary extensions by authorized or administrative users. Abuse of this behavio

• 7.2 High severity

  ConnectWise ScreenConnect Improper Authentication Exploited

  CVE-2025-3935Apr 25, 2025ConnectWiseEPSS 3.6%

  ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. It is important to note th

• 10.0 Critical severity

  ConnectWise ScreenConnect Authentication Bypass Exploited

  CVE-2024-1709Feb 21, 2024ConnectWiseEPSS 100%

  ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

• 8.4 High severity

  ConnectWise ScreenConnect Path Traversal Exploited

  CVE-2024-1708Feb 21, 2024ConnectWiseEPSS 95.4%

  ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.