Connectwise Screenconnect vulnerabilities

• connectwise screenconnect ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions CVE-2026-84869 In KEV 9.9 CriticalSeptember 8, 2026
• connectwise screenconnect In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation... CVE-2026-11596 4.7 MediumJune 10, 2026
• connectwise screenconnect ScreenConnect Instance Level Cryptographic Material Exposure CVE-2026-3564 9.0 CriticalMarch 17, 2026
• connectwise screenconnect Certificate Signing Extension Returns Encrypted Values CVE-2025-14823 5.3 MediumDecember 18, 2025
• connectwise screenconnect Improper server-side validation in ScreenConnect extension framework CVE-2025-14265 9.1 CriticalDecember 11, 2025
• connectwise screenconnect ScreenConnect Exposure to ASP.NET ViewState Code Injection CVE-2025-3935 In KEV 8.1 HighApril 25, 2025
• connectwise screenconnect Authentication bypass using an alternate path or channel CVE-2024-1709 In KEVPublic exploit EPSS 100.0% 10.0 CriticalFebruary 21, 2024
• connectwise screenconnect Improper limitation of a pathname to a restricted directory (“path traversal”) CVE-2024-1708 In KEVPublic exploit EPSS 95.4% 8.4 HighFebruary 21, 2024
• connectwise screenconnect, automate +1 more ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote... CVE-2023-47257 8.1 HighFebruary 1, 2024
• connectwise screenconnect, automate +1 more ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers... CVE-2023-47256 5.5 MediumFebruary 1, 2024
• connectwise screenconnect ConnectWise - ScreenConnect Session Code Bypass CVE-2022-36781 5.3 MediumSeptember 28, 2022