CVE-2026-127063

The third-party RMM+ extension for ConnectWise ScreenConnect uses a static API secret by default. The value can be changed by an administrator; however, environments retaining the default value may allow unauthorized access to extension API functionality, including the ability to send commands to managed agents. This issue is specific to the third-party extension and does not affect the ScreenConnect server or client. Scope: This issue affects the third-party RMM+ extension for ConnectWise ScreenConnect. Deployments without the extension are not affected. ScreenConnect server or client software are not impacted.

• CWE-1392

• https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-127063

Published

Nov 12, 2026

Last Modified

Nov 13, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-127046The MISP Modules website component contains an information d…9.2
• CVE-2026-12705Missing support for integrity check vulnerability in ABB KNX…6.4
• CVE-2026-127050Backup Migration before 2.1.8 for WordPress contains a path …6.4
• CVE-2026-127056PapaParse before 5.7.1 contains an inefficient algorithmic c…7.5
• CVE-2026-127058WonderCMS before 3.7.0 contains an unverified password chang…4.9
• CVE-2026-12706A use-after-free vulnerability was found in FFmpeg's RASC vi…6.5
• CVE-2026-12707Summary Cloudflare quiche was discovered to be vulnerable…7.5
• CVE-2026-12708Summary Cloudflare tokio-quiche was found to contain an un…8.7
• CVE-2026-127099A flaw was found in SSSD's conversion of X.509 certificate R…5.9
• CVE-2026-1271The ProfileGrid – User Profiles, Groups and Communities plug…5.3
• CVE-2026-12710A Missing Authorization vulnerability in the QueryEngineTask…9.3
• CVE-2026-127100A flaw was found in SSSD's PAM responder on builds with the …5.5