CVE-2026-3564

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

Score

CVSS 3.1 9.0 Critical

Status

Awaiting Analysis - 7d616e1a-3288-43b1-a0dd-0a65d3e70a49

Published

2026-03-17

Last modified

2026-07-09

Weaknesses

CWE-347

Affected products

• Screenconnect (Connectwise)

References

• https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin