Known vulnerabilities in ScreenConnect

Vendor: ConnectWise
Software: ScreenConnect
Software CPE: cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*
Website: https://www.connectwise.com/
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ScreenConnect ScreenConnect is affected by 7 known vulnerabilities: 2 critical, 2 high, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126638 - Permissions, Privileges, and Access Controls
CVE-2023-47256		 CWE-264 Low
No
No
 23.8.4.8703 21.04.2026 SB2023112081
#VU124129 - Insecure Storage of Sensitive Information
CVE-2026-3564		 CWE-922 Low
No
No
 26.1.17.9560 19.03.2026 SB2026031932
#VU119866 - Download of Code Without Integrity Check
CVE-2025-14265		 CWE-494 High
No
No
 25.8.0.9440 11.12.2025 SB2025121154
#VU110002 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-3935		 CWE-94 Critical
No
No
 25.2.4.9229 30.05.2025 SB2025053040
#VU86689 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-1708		 CWE-22 Low
Available
Exploited
 23.9.8.8811 21.02.2024 SB2024022121
#VU86688 - Authentication Bypass Using an Alternate Path or Channel
CVE-2024-1709		 CWE-288 Critical
Available
Exploited
 23.9.8.8811 21.02.2024 SB2024022121
#VU126637 - Improper input validation
CVE-2023-47257		 CWE-20 High
No
No
 23.8.4.8703 20.11.2023 SB2023112081