VULNERABILITY INTELLIGENCE
CVE-2026-3564
CVSS score9 CRITICAL
EPSS probability0.37%
CISA KEVNot currently listed
Published2026-03-17
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.
Weakness classification
- 7d616e1a-3288-43b1-a0dd-0a65d3e70a49: CWE-347