CVE-2024-1708

Known Exploited (CISA KEV)HIGH

7.6

CVSS Severity Score

EPSS Score26.4920%

EPSS Percentile86.32th

PublishedApr 28, 2026

Last ModifiedJun 12, 2026

Vulnerability Description

ConnectWise ScreenConnect is vulnerable to ConnectWise ScreenConnect Path Traversal Vulnerability. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected Platforms (CPE)

📦

ConnectWise

ScreenConnect

Refer to description

Related Vulnerabilities

CVE-2019-165179.8

An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a CORS misconfiguration...

CVE-2019-165138.8

An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to send API req...

CVE-2019-165147.2

An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows remote code ex...

CVE-2019-165156.5

An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. Certain HTTP security headers ar...