Critical ScreenConnect Vulnerability Let Attackers Expose Sensitive Configuration Data

Cybersecuritynews •Abinaya • December 16, 2025

ConnectWise has issued a security update for ScreenConnect™ to address a critical vulnerability that could enable attackers to expose sensitive configuration data and install untrusted extensions. The flaw, identified as CVE-2025-14265, affects only the ScreenConnect server component, leaving host and guest clients unaffected. The vulnerability stems from improper code integrity validation during extension installations, classified […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical ScreenConnect Vulnerability Exposes Sensitive Data A critical vulnerability in ScreenConnect, tracked as CVE-2025-14265, allows attackers to expose sensitive configuration data. The flaw, resulting from improper code integrity validation during extension installations, affects only the ScreenConnect server component, leaving host and guest clients unaffected. ConnectWise has issued a security update to address this issue. 2 sources 52

Extracted Entities

Critical ScreenConnect Vulnerability Let Attackers Expose Sensitive Configuration Data

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Tools (1)