CVE-2026-3564

critical · 9

A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

CVSS

0.4%

EPSS (exploit prob.)

30th

EPSS percentile

2026-03-17

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-347

References

https://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-3564