📦 Screenconnect

This vulnerability allows authorized or administrative users to install and execute untrusted extensions on ScreenConnect servers, potentially leading to remote code execution or unauthorized access t...

CVE-2024-1709 is an authentication bypass vulnerability in ConnectWise ScreenConnect that allows attackers to access administrative functions without valid credentials. This affects all organizations ...

CVE-2025-3935 is a ViewState code injection vulnerability affecting ScreenConnect versions 25.2.3 and earlier. Attackers with compromised machine keys can craft malicious ViewState payloads to achieve...

This path traversal vulnerability in ConnectWise ScreenConnect allows attackers to bypass authentication and potentially execute remote code or access sensitive data. It affects all organizations usin...

This vulnerability in ConnectWise ScreenConnect allows man-in-the-middle attackers to send crafted messages that can lead to remote code execution. It affects all ScreenConnect installations up to ver...

This vulnerability in ScreenConnect's Certificate Signing Extension could expose encrypted Azure Key Vault configuration values to unauthenticated users through client-facing endpoints. While the valu...