CVE-2025-3935 ConnectWise ScreenConnect
ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.
- CVSS
- not scored
On CISA’s exploited list
ConnectWise ScreenConnect Improper Authentication Vulnerability
- Added
- 2025-06-02
- Federal patch deadline
- 2025-06-23
- Ransomware use
- not known