SC
Remote Access
ScreenConnect
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 7Low 0
Watch
Add ScreenConnect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16515 | 6.5 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2023-47256 | 5.5 | Feb 1 | ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings Affected: before 23.8.5 |
| CVE-2025-14823 | 5.3 | Dec 18 | In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to… Affected: before 1.0.12 |
| CVE-2022-36781 | 5.3 | Sep 28 | ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the… Affected: before 22.7 |
| CVE-2019-16516 | 5.3 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: through 19.2.24707; 19.3.25270.7185 |
| CVE-2019-16512 | 4.8 | Jan 23 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185 Affected: 19.3.25270.7185 |
| CVE-2026-11596 | 4.7 | Jun 10 | In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the… Affected: All versions prior to 26.2 |
Showing 7