CVE-2026-11596

In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens.

CVSS v3 4.7 MEDIUM

4.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.2 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-11596	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) En versiones de ScreenConnect™ anteriores a la 26.2, la validación de entrada dentro de la funcionalidad de creación de Host Pass podría permitir a un usuario autenticado con privilegios de creación de Host Pass la capacidad de especificar una duración de caducidad del token más allá del máximo previsto al generar tokens de acceso delegados.

Information

Published : 2026-06-10 18:16

Updated : 2026-10-26 11:10

NVD link : CVE-2026-11596

Mitre link : CVE-2026-11596

CVE.ORG link : CVE-2026-11596

JSON object : View

Products Affected

connectwise

screenconnect

CWE

CWE-1284

Improper Validation of Specified Quantity in Input

{"id": "CVE-2026-11596", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11596", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-10T18:18:34.629863Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 1.2}]}, "affected": [{"source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", "affectedData": [{"vendor": "ConnectWise", "modules": ["Host Pass"], "product": "ScreenConnect", "versions": [{"status": "affected", "version": "All versions prior to 26.2"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-10T18:16:40.113", "references": [{"url": "https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-11596", "tags": ["Patch", "Vendor Advisory"], "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "In ScreenConnect\u2122 versions prior to 26.2, input\nvalidation within the Host Pass creation functionality could allow an\nauthenticated user with Host Pass creation privileges the ability to specify a\ntoken expiration duration beyond the intended maximum when generating delegated\naccess tokens."}, {"lang": "es", "value": "En versiones de ScreenConnect\u2122 anteriores a la 26.2, la validaci\u00f3n de entrada dentro de la funcionalidad de creaci\u00f3n de Host Pass podr\u00eda permitir a un usuario autenticado con privilegios de creaci\u00f3n de Host Pass la capacidad de especificar una duraci\u00f3n de caducidad del token m\u00e1s all\u00e1 del m\u00e1ximo previsto al generar tokens de acceso delegados."}], "lastModified": "2026-10-26T11:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:connectwise:screenconnect:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49F72BA2-1BFD-4637-90EE-61746A07231C", "versionEndExcluding": "26.2.2.9585"}], "operator": "OR"}]}], "sourceIdentifier": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49"}