Product by ConnectWise
ConnectWise ScreenConnect
11 known vulnerabilities in ConnectWise ScreenConnect (ConnectWise), 4 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
4
Actively exploited (KEV)
2
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-1709 | Authentication bypass using an alternate path or channel In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2024-1708 | Improper limitation of a pathname to a restricted directory (“path traversal”) In CISA KEVRansomware | 8.4 | |
| Critical | CVE-2025-3935 | ScreenConnect Exposure to ASP.NET ViewState Code Injection In CISA KEV | 8.1 | |
| Critical | CVE-2026-84869 | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions In CISA KEV | 9.9 | |
| High | CVE-2023-47257 | ConnectWise ScreenConnect: Remote Code Execution | 8.1 | |
| Critical | CVE-2025-14265 | Improper server-side validation in ScreenConnect extension framework | 9.1 | |
| Critical | CVE-2026-3564 | ScreenConnect Instance Level Cryptographic Material Exposure | 9.0 | |
| Medium | CVE-2022-36781 | ConnectWise - ScreenConnect Session Code Bypass | 5.3 | |
| Medium | CVE-2026-11596 | ConnectWise ScreenConnect: Improper Validation of Specified Quantity in Input | 4.7 | |
| Medium | CVE-2023-47256 | ConnectWise ScreenConnect: security vulnerability | 5.5 | |
| Medium | CVE-2025-14823 | Certificate Signing Extension Returns Encrypted Values | 5.3 |