PT-2026-48490 · Connectwise · Screenconnect

Damian West · CVE-2026-11596 · Published 2026-06-10 · Updated 2026-06-12

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ScreenConnect versions prior to 26.2

Description Insufficient input validation within the Host Pass creation functionality allows an authenticated user with Host Pass creation privileges to specify a token expiration duration that exceeds the intended maximum when generating delegated access tokens.

Recommendations Update to version 26.2.

Exploit

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-11596

Affected Products

Screenconnect

References · 3

• 🔥 https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-11596 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11596 · Security Note
• https://reddit.com/r/ScreenConnect/comments/1u3mby1/cve202611596_host_pass_vulnerability · Reddit Post