CVE-2023-47256: ConnectWise Automate

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings

Affected products

• ConnectWise Automate: affected versions not specified
• ConnectWise ScreenConnect: before 23.8.5 (fixed in 23.8.5)

Published 2024-02-01. Last modified 2026-06-17.