CVE-2026-3564

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

CVSS v3 9.0 CRITICAL

9.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.2 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin

Configurations

No configuration.

History

No history.

Information

Published : 2026-03-17 15:16

Updated : 2026-07-09 18:16

NVD link : CVE-2026-3564

Mitre link : CVE-2026-3564

CVE.ORG link : CVE-2026-3564

JSON object : View

Products Affected

No product.

CWE

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2026-3564", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3564", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-17T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.2}]}, "affected": [{"source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", "affectedData": [{"vendor": "ConnectWise", "modules": ["Server component", "Server authentication cryptographic material handling"], "product": "ScreenConnect", "versions": [{"status": "affected", "version": "All server versions prior to 26.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-03-17T15:16:19.253", "references": [{"url": "https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin", "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE."}, {"lang": "es", "value": "Una condici\u00f3n en ScreenConnect podr\u00eda permitir a un actor con acceso a material criptogr\u00e1fico a nivel de servidor utilizado para la autenticaci\u00f3n obtener acceso no autorizado, incluyendo privilegios elevados, en ciertos escenarios."}], "lastModified": "2026-07-09T18:16:51.930", "sourceIdentifier": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49"}