DE | EN
News November 13, 2026

Critical unpatched ScreenConnect flaw allows security bypass

A newly disclosed vulnerability in ConnectWise ScreenConnect’s RMM+ extension remains unpatched. An anonymous remote attacker can exploit it to bypass security safeguards.

Critical unpatched ScreenConnect flaw allows security bypass

Key points

  • The affected component is the RMM+ extension in ConnectWise ScreenConnect.
  • The vulnerability is classified as critical and remains unpatched.
  • Anonymous attackers can exploit this flaw remotely to bypass security controls.

Context

The security advisory describes a critical vulnerability affecting ConnectWise ScreenConnect’s RMM+ extension. Because no patch is yet available, the issue requires particular attention wherever this component is used within enterprise or legacy environments.

What this means for you

Directly applicable

You can use this alert to identify ScreenConnect deployments and verify the current vendor guidance before relying on the affected component.

Who benefits: Technical decision-makers responsible for ScreenConnect deployments can use the warning to focus security reviews and architectural risk assessments.

Share article:

Does a report affect your system?

Send the link to the report and two sentences about your system. You get an assessment of whether action is needed and what the fix looks like.

Get an assessment