Skip to content
OpenAdvisories

Product · ConnectWise

ScreenConnect

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-11596

    In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an a…

    ConnectWise ScreenConnect
  • Medium 5.3
    CVE-2025-14823

    Certificate Signing Extension Returns Encrypted Values

    In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values re…

    ConnectWise ScreenConnect
  • Medium 5.3
    CVE-2022-36781

    ConnectWise - ScreenConnect Session Code Bypass

    ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unautho…

    ConnectWise ScreenConnect