SC
Remote Access
ScreenConnect
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 7Low 0
Watch
Add ScreenConnect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1709 RansomwareIn wildKEV | 10.0 | Feb 21 | Authentication bypass using an alternate path or channel Affected: through 23.9.7 |
| CVE-2026-84869 In wildKEV | 9.9 | Sep 8 | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions Affected: All versions prior to 26.6.5 |
| CVE-2024-1708 RansomwareIn wildKEV | 8.4 | Feb 21 | Improper limitation of a pathname to a restricted directory (“path traversal”) Affected: through 23.9.7 |
| CVE-2025-3935 In wildKEV | 7.2 | Apr 25 | ScreenConnect Exposure to ASP.NET ViewState Code Injection Affected: <25.2.3 |
| CVE-2023-25718 | 9.8 | Feb 13 | In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the… Affected: through 22.9.10032 |
| CVE-2019-16517 | 9.8 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2025-14265 | 9.1 | Dec 11 | In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the installation and execution of untrusted or… Affected: before 25.8.0.9438 |
| CVE-2023-25719 | 8.8 | Feb 13 | ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter Affected: before 22.9.10032 |
| CVE-2019-16513 | 8.8 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2023-47257 | 8.1 | Feb 1 | ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages Affected: before 23.8.5 |
| CVE-2019-16514 | 7.2 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2019-16515 | 6.5 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2023-47256 | 5.5 | Feb 1 | ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings Affected: before 23.8.5 |
| CVE-2025-14823 | 5.3 | Dec 18 | In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to… Affected: before 1.0.12 |
| CVE-2022-36781 | 5.3 | Sep 28 | ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the… Affected: before 22.7 |
| CVE-2019-16516 | 5.3 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: through 19.2.24707; 19.3.25270.7185 |
| CVE-2019-16512 | 4.8 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2026-11596 | 4.7 | Jun 10 | In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the… Affected: All versions prior to 26.2 |
Showing 18