9.0Kritisch
CVE-2026-3564ScreenConnect Instance Level Cryptographic Material Exposure
Beschreibung
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.
Schwachstellentyp (CWE):
CWE-347
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| ConnectWise | ScreenConnect | All server versions prior to 26.1 |