ConnectWise ScreenConnect

• CVE-2026-84869 Critical 9.9 Exploited ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions 0.9%
• CVE-2025-3935 High 8.1 Exploited ScreenConnect Exposure to ASP.NET ViewState Code Injection 3.6%
• CVE-2024-1709 Critical 10.0 Exploited Authentication bypass using an alternate path or channel 100.0%
• CVE-2024-1708 High 8.4 Exploited Improper limitation of a pathname to a restricted directory (“path traversal”) 95.4%
• CVE-2026-11596 Medium 4.7 In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a tok 0.2%
• CVE-2026-3564 Critical 9.0 ScreenConnect Instance Level Cryptographic Material Exposure 0.4%
• CVE-2025-14823 Medium 5.3 Certificate Signing Extension Returns Encrypted Values 0.2%
• CVE-2025-14265 Critical 9.1 Improper server-side validation in ScreenConnect extension framework 0.4%
• CVE-2022-36781 Medium 5.3 ConnectWise - ScreenConnect Session Code Bypass 0.6%