4.7Orta
CVE-2026-11596
Açıklama
In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens.
Zayıflık türü (CWE):
CWE-1284
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ConnectWise | ScreenConnect | All versions prior to 26.2 |
Kaynaklar ve yamalar
- https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-11596 PatchVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*< 26.2.2.9585