Skip to content
OpenAdvisories

Vendor

ConnectWise

17 known vulnerabilities.

Products

ScreenConnect 9 Automate 4 PSA 3 Risk Assessment 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2025-11492 Public exploit

    HTTP Configuration and Encryption in Transit

    In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the enc…

    ConnectWise Automate
  • Critical 10.0
    CVE-2024-1709 Exploited · Ransomware Public exploit EPSS 100%

    Authentication bypass using an alternate path or channel

    ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

    ConnectWise ScreenConnect
    KEV Feb 22, 2024
  • High 8.4
    CVE-2024-1708 Exploited · Ransomware Public exploit EPSS 95%

    Improper limitation of a pathname to a restricted directory (“path traversal”)

    ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

    ConnectWise ScreenConnect
    KEV Apr 28, 2026