ConnectWise ScreenConnect Privilege Escalation Vulnerability

CERT-Bund has released a critical security advisory (WID-SEC-2026-0763) detailing a vulnerability in ConnectWise ScreenConnect software, affecting versions prior to 26.1. The vulnerability, with a CVSS Base Score of 9.0, allows remote, anonymous attackers to bypass security controls and potentially escalate their privileges on systems running Linux, UNIX, or Windows. The advisory indicates that mitigation is available.

Organizations utilizing ConnectWise ScreenConnect must urgently update their software to a patched version (26.1 or later) to address this critical security flaw. Failure to do so could result in unauthorized access and privilege escalation, compromising sensitive data and system integrity. While specific penalties are not mentioned, such vulnerabilities typically lead to significant operational disruption and potential reputational damage if exploited.