Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

ConnectWise security patch release for CVE-2026-3564

Security Patch Release
First reported
Last updated
Happening score
H score 49
1 unique sources, 1 articles

Summary

Hide ▲

ConnectWise released ScreenConnect 26.1 to harden machine key handling after disclosing CVE-2026-3564, a flaw that can enable unauthorized access and privilege escalation. The update covers ScreenConnect versions before 26.1 and adds encrypted storage plus improved handling for machine keys. Cloud customers were moved to the safe version automatically, while on-premises administrators were told to upgrade as soon as possible. ConnectWise also said it has no evidence of active exploitation in its hosted service, even though attempts to abuse disclosed machine key material were observed in the wild.

Cases

Sitecore ViewState exploitation and ScreenConnect machine-key hardening (3)

Related Happenings

AWS exposed-key hardening guidance for Amazon SES phishing abuse

Defensive Guidance
First: 04.05.2026 23:03 Last: 04.05.2026 23:03 Sources 1

About this happening: **Kaspersky** urged organizations to harden **AWS IAM** and credential handling after **exposed access keys** were linked to phishing delivery through **Amazon SES**, reducing the...

Open Happening

Apple Background Security Improvements WebKit patch (CVE-2026-20643)

Security Patch Release
First: 18.03.2026 03:06 Last: 18.03.2026 03:06 Sources 1

About this happening: Apple's **first Background Security Improvements** release patches **CVE-2026-20643** in **WebKit**, letting **iPhones, iPads, and Macs** get a security fix **without a full OS up...

Open Happening

Hewlett Packard Enterprise (HPE) security patch release for CVE-2026-23813

Security Patch Release
First: 10.03.2026 19:30 Last: 10.03.2026 19:30 Sources 1

About this happening: **HPE** released **security updates** for **Aruba Networking AOS-CX**, closing **multiple vulnerabilities** including authentication and code execution issues on **CX-series campu...

Open Happening

Cisco Secure Firewall Management Center patch release (CVE-2026-20079, CVE-2026-20131)

Security Patch Release
First: 04.03.2026 21:12 Last: 04.03.2026 21:12 Sources 1

About this happening: **Cisco Secure Firewall Management Center (FMC)** patch release for **CVE-2026-20131** and **CVE-2026-20079** addressed **CVSS 10** flaws that could let an **unauthenticated remot...

Latest development: 20.03.2026 17:09

CISA ordered Federal Civilian Executive Branch (FCEB) agencies to apply security updates for CVE-2026-20131 in Cisco Secure Firewall Management Center (FMC) by Sunday, March 22 after Cisco updated its bulletin on March 18 to warn of active exploitation in the wild. Amazon threat intelligence researchers said Interlock ransomware had been exploiting CVE-2026-20131 as a zero-day since the end of January, and Cisco said the web-based management interface could let an unauthenticated, remote attacker execute arbitrary Java code as root on an affected device.

Open Happening

Trend Micro security patch release for CVE-2025-71210

Security Patch Release
First: 26.02.2026 19:58 Last: 26.02.2026 19:58 Sources 1

About this happening: **Trend Micro** released **Critical Patch Build 14136** for **Apex One**, closing **two critical vulnerabilities** that could allow **remote code execution** on vulnerable Windows...

Open Happening

Timeline

  1. 18.03.2026 20:10 1 articles · 2mo ago

    ConnectWise warns of ScreenConnect CVE-2026-3564

    Initial Disclosure

    ConnectWise warns ScreenConnect customers about CVE-2026-3564, a critical cryptographic signature verification flaw affecting ScreenConnect versions before 26.1 that could let an attacker abuse ASP.NET machine keys for unauthorized session authentication, leading to unauthorized access and privilege escalation.

    Show sources
    Open in new tab
  2. 18.03.2026 20:10 2 articles · 2mo ago

    ScreenConnect 26.1 hardens machine-key handling

    Mitigation Patch Update

    ConnectWise says ScreenConnect 26.1 strengthens machine-key protection with encrypted storage and improved handling, with cloud users moved to the safe version automatically and on-premises administrators told to upgrade as soon as possible.

    Show sources
    Open in new tab