Description
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ConnectWise | ScreenConnect | All server versions prior to 26.1 | — |
Advisories 1
- WID-SEC-2026-0763 ConnectWise ScreenConnect: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation BSI CERT-Bund (WID) · Mar 17, 2026