SC
Remote Access
ScreenConnect
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 7Low 0
Watch
Add ScreenConnect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1709 RansomwareIn wildKEV | 10.0 | Feb 21 | Authentication bypass using an alternate path or channel Affected: through 23.9.7 |
| CVE-2026-84869 In wildKEV | 9.9 | Sep 8 | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions Affected: All versions prior to 26.6.5 |
| CVE-2023-25718 | 9.8 | Feb 13 | In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the… Affected: through 22.9.10032 |
| CVE-2019-16517 | 9.8 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2025-14265 | 9.1 | Dec 11 | Improper server-side validation in ScreenConnect extension framework Affected: All versions prior to 2025.8 |
| CVE-2026-3564 | 9.0 | Mar 17 | ScreenConnect Instance Level Cryptographic Material Exposure Affected: All server versions prior to 26.1 |
Showing 6