CVE-2026-3564

9.0 criticalEPSS 0.4%

Critical (9.0). EPSS 0.4% chance of exploitation in the next 30 days.

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2026-03-17
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

References

https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin

Check your stack JSON