What’s Vulnerable › Vulnerabilities
CVE-2026-3564: ScreenConnect Instance Level Cryptographic Material Exposure
- Severity: critical (CVSS 9.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-03-17 · updated 2026-07-09
- Weakness: CWE-347
Description
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.
Affected products
- ConnectWise ScreenConnect: All server versions prior to 26.1
References
Get alerted when CVE-2026-3564 or the next vulnerability affects your stack