ScreenConnect™ 26.1 Security Hardening

ConnectWise has released a security update for ScreenConnect. The update addresses issues related to protection of server-level cryptographic material. Earlier versions stored unique machine keys per instance within server configuration files. Under certain conditions unauthorized actors could extract this material. They could misuse it for session authentication. ScreenConnect version 26.1 introduces enhanced protections for machine key handling including encrypted storage and management. The update reduces the risk of unauthorized access in scenarios where server integrity may be compromised. The vulnerability is tracked as CVE-2026-3564. It carries an important severity rating and high priority. Cloud users require no action. On-premise users should upgrade to version 26.1. Partners can obtain the update from the ScreenConnect download page with a valid on-premises license or through the Automate Product Updates page for integrated installations.