Skip to content
OpenAdvisories

Vendor

ConnectWise

17 known vulnerabilities.

Products

ScreenConnect 9 Automate 4 PSA 3 Risk Assessment 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2025-11492 Public exploit

    HTTP Configuration and Encryption in Transit

    In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the enc…

    ConnectWise Automate
  • Critical 10.0
    CVE-2024-1709 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Authentication bypass using an alternate path or channel

    ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

    ConnectWise ScreenConnect
    KEV Feb 22, 2024