Skip to content
OpenAdvisories

Vendor

ConnectWise

17 known vulnerabilities.

Products

ScreenConnect 9 Automate 4 PSA 3 Risk Assessment 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-84869 Exploited

    ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

    A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

    ConnectWise ScreenConnect
    KEV Sep 11, 2026
  • High 8.1
    CVE-2025-3935 Exploited

    ScreenConnect Exposure to ASP.NET ViewState Code Injection

    ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys.  It is important to note …

    ConnectWise ScreenConnect
    KEV Jun 2, 2025
  • Critical 10.0
    CVE-2024-1709 Exploited · Ransomware Public exploit EPSS 100%

    Authentication bypass using an alternate path or channel

    ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

    ConnectWise ScreenConnect
    KEV Feb 22, 2024
  • High 8.4
    CVE-2024-1708 Exploited · Ransomware Public exploit EPSS 95%

    Improper limitation of a pathname to a restricted directory (“path traversal”)

    ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

    ConnectWise ScreenConnect
    KEV Apr 28, 2026