<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: connectwise-screenconnect</title><description>Every new CVE for connectwise-screenconnect.</description><link>https://agentprime.io/</link><item><title>CVE-2026-84869: ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions</title><link>https://agentprime.io/advisories/CVE-2026-84869/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84869/</guid><description>CVSS 9.9 (Critical). Critical: In CISA’s KEV catalogue since 11 Sept 2026: it is known to be exploited. CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 19:29:33 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2026-11596: ConnectWise ScreenConnect: In ScreenConnect™ versions prior to 26.2…</title><link>https://agentprime.io/advisories/CVE-2026-11596/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11596/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Jun 2026 17:15:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3564: ScreenConnect Instance Level Cryptographic Material Exposure</title><link>https://agentprime.io/advisories/CVE-2026-3564/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3564/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Mar 2026 14:48:59 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-14823: Certificate Signing Extension Returns Encrypted Values</title><link>https://agentprime.io/advisories/CVE-2025-14823/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14823/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 15:50:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14265: Improper server-side validation in ScreenConnect extension framework</title><link>https://agentprime.io/advisories/CVE-2025-14265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14265/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Dec 2025 14:21:53 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-3935: ScreenConnect Exposure to ASP.NET ViewState Code Injection</title><link>https://agentprime.io/advisories/CVE-2025-3935/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3935/</guid><description>CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 2 Jun 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Apr 2025 18:27:44 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-1709: Authentication bypass using an alternate path or channel</title><link>https://agentprime.io/advisories/CVE-2024-1709/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1709/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 22 Feb 2024: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Feb 2024 15:36:03 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-1708: Improper limitation of a pathname to a restricted directory (“path traversal”)</title><link>https://agentprime.io/advisories/CVE-2024-1708/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1708/</guid><description>CVSS 8.4 (High). Critical: In CISA’s KEV catalogue since 28 Apr 2026: it is known to be exploited. CVSS score 8.4 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Feb 2024 15:29:10 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2022-36781: ConnectWise - ScreenConnect Session Code Bypass</title><link>https://agentprime.io/advisories/CVE-2022-36781/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-36781/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Sep 2022 19:11:20 GMT</pubDate><category>CVE</category></item></channel></rss>