CVE-2026-3564
CVE-2026-3564
9.0
CriticalPublished:
Last updated:
Source:7d616e1a-3288-43b1-a0dd-0a65d3e70a49
Awaiting Analysis
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Network
- Attack Complexity
- High
- Privileges Required
- None
- User Interaction
- None
- Scope
- Changed
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
A condition in ScreenConnect may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios.
References
7d616e1a-3288-43b1-a0dd-0a65d3e70a49
https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin