CVEvulnerability

CVE-2026-3564

9.0 CRITICAL Published 2026-03-17 Modified 2026-07-09 Official page ↗
Status
Awaiting Analysis
Published
2026-03-17
Last modified
2026-07-09
Assigner
7d616e1a-3288-43b1-a0dd-0a65d3e70a49
CVSS 3.1 (7d616e1a-3288-43b1-a0dd-0a65d3e70a49)
9.0 CRITICAL — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-347

Description

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

Related

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References