PT-2026-48490 · Connectwise · Screenconnect

Damian West · Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-11596

Mitre

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens.

Exploit

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-11596

Affected Products

Screenconnect

References · 2

• 🔥 https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-11596 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11596 · Security Note