Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2026-3564

ScreenConnect Instance Level Cryptographic Material Exposure

Description

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ConnectWise ScreenConnect

Default version status: unaffected

  • All server versions prior to 26.1affected

References