# cve.now: ConnectWise

The newest entries naming ConnectWise as an affected vendor (up to 200), of 17 in all, 4 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-84869](https://cve.now/CVE-2026-84869.md): ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions (CVSS 9.9, KEV)
- [CVE-2026-11596](https://cve.now/CVE-2026-11596.md): In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user wit (CVSS 4.7)
- [CVE-2026-9089](https://cve.now/CVE-2026-9089.md): The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operatio (CVSS 8.8)
- [CVE-2026-6066](https://cve.now/CVE-2026-6066.md): Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center (CVSS 7.1)
- [CVE-2026-3564](https://cve.now/CVE-2026-3564.md): ScreenConnect Instance Level Cryptographic Material Exposure (CVSS 9.0)
- [CVE-2026-0696](https://cve.now/CVE-2026-0696.md): Session Cookies Missing HttpOnly Attribute (CVSS 6.5)
- [CVE-2026-0695](https://cve.now/CVE-2026-0695.md): Stored XSS in Time Entry Audit Trail (CVSS 8.7)
- [CVE-2025-14823](https://cve.now/CVE-2025-14823.md): Certificate Signing Extension Returns Encrypted Values (CVSS 5.3)
- [CVE-2025-14265](https://cve.now/CVE-2025-14265.md): Improper server-side validation in ScreenConnect extension framework (CVSS 9.1)
- [CVE-2025-11493](https://cve.now/CVE-2025-11493.md): Self-Update Verification Mechanism Process in ConnectWise Automate (CVSS 8.8)
- [CVE-2025-11492](https://cve.now/CVE-2025-11492.md): HTTP Configuration and Encryption in Transit (CVSS 9.6)
- [CVE-2025-7204](https://cve.now/CVE-2025-7204.md): Exposure of password hashes via API responses in ConnectWise PSA (CVSS 6.5)
- [CVE-2025-4876](https://cve.now/CVE-2025-4876.md): Hardcoded Key Revealed in ConnectWise Password Encryption Utility (CVSS 6.0)
- [CVE-2025-3935](https://cve.now/CVE-2025-3935.md): ScreenConnect Exposure to ASP.NET ViewState Code Injection (CVSS 8.1, KEV)
- [CVE-2024-1709](https://cve.now/CVE-2024-1709.md): Authentication bypass using an alternate path or channel (CVSS 10.0, KEV)
- [CVE-2024-1708](https://cve.now/CVE-2024-1708.md): Improper limitation of a pathname to a restricted directory (“path traversal”) (CVSS 8.4, KEV)
- [CVE-2022-36781](https://cve.now/CVE-2022-36781.md): ConnectWise - ScreenConnect Session Code Bypass (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/connectwise
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.