Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

ConnectWise

Products: ScreenConnect

93.0

Score

3

CVEs

3

Active

0

PoC

3

KEV

#31

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-84869	2026-09-08	9.9v3.1	ACTIVE		Low	Low	no	26.4	ScreenConnect	A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
CVE-2025-3935	2025-04-25	8.1v3.1	ACTIVE		High	None	no	26.0	ScreenConnect	ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. It is important to note that to obtain these machine keys, privil
CVE-2024-1709	2024-02-21	10.0v3.1	ACTIVE		Low	None	YES	40.6	ScreenConnect	ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3