CVE-2026-3564

Published: Mar 17, 2026Modified: Jul 9, 2026

9.0

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 6.0

Source: 7d616e1a-3288-43b1-a0dd-0a65d3e70a49 (Secondary)

Description

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

Related CWEs

CWE-347

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (1)

https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin

Source: 7d616e1a-3288-43b1-a0dd-0a65d3e70a49

Timeline

No history available yet.