{"id":"EUVD-2026-124597","enisaUuid":"1effcade-f7ce-3f84-960a-e92222be5707","description":"The\nthird-party RMM+ extension for ConnectWise ScreenConnect uses a static API\nsecret by default. The value can be changed by an administrator; however,\nenvironments retaining the default value may allow unauthorized access to\nextension API functionality, including the ability to send commands to managed\nagents. This issue is specific to the third-party extension and does not affect\nthe ScreenConnect server or client.\n\n\n\n\n\nScope: This issue affects the third-party RMM+\nextension for ConnectWise ScreenConnect. Deployments without the extension are\nnot affected. ScreenConnect server or client software are not impacted.","datePublished":"Nov 12, 2026, 5:50:07 PM","dateUpdated":"Nov 13, 2026, 5:00:55 AM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-127063\n","aliases":"CVE-2026-127063\nGHSA-h94v-vx95-5jpx\n","assigner":"ConnectWise","epss":0.38,"enisaIdProduct":[{"id":"a7be0ea0-2922-33bc-91f2-c25f2dd30858","product":{"name":"RMM+","vendor":{"name":"DataComm"}},"product_version":"All extension versions"}],"enisaIdVendor":[{"id":"c2bcd7eb-9f5f-37be-bca3-e0f788edc9fc","vendor":{"name":"DataComm"}}],"enisaIdVulnerability":[{"id":"05a3b547-a700-37fb-a9b9-d06d55834053","vulnerability":{"id":"CVE-2026-127063","description":"The\nthird-party RMM+ extension for ConnectWise ScreenConnect uses a static API\nsecret by default. The value can be changed by an administrator; however,\nenvironments retaining the default value may allow unauthorized access to\nextension API functionality, including the ability to send commands to managed\nagents. This issue is specific to the third-party extension and does not affect\nthe ScreenConnect server or client.\n\n\n\n\n\nScope: This issue affects the third-party RMM+\nextension for ConnectWise ScreenConnect. Deployments without the extension are\nnot affected. ScreenConnect server or client software are not impacted.","datePublished":"Nov 12, 2026, 5:50:07 PM","dateUpdated":"Nov 13, 2026, 5:00:55 AM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-127063\n","enisa_id":"EUVD-2026-124597\n","assigner":"ConnectWise","epss":0.38,"dataProcessed":"Nov 14, 2026, 10:00:19 PM","vulnerabilityProduct":[{"id":"314b6893-dfc8-33db-9d70-3962f6c0cc09","product":{"name":"RMM+","vendor":{"name":"DataComm"}},"product_version":"All extension versions"}],"vulnerabilityVendor":[{"id":"0b11251f-ba1e-338a-b9e3-54a7549b3b97","vendor":{"name":"DataComm"}}]}},{"id":"72a86db5-47e2-35dd-9f86-3eeca2c1711b","vulnerability":{"id":"GHSA-h94v-vx95-5jpx","description":"The\nthird-party RMM+ extension for ConnectWise ScreenConnect uses a static API\nsecret by default. The value can be changed by an administrator; however,\nenvironments retaining the default value may allow unauthorized access to\nextension API functionality, including the ability to send commands to managed\nagents. This issue is specific to the third-party extension and does not affect\nthe ScreenConnect server or client.\n\n\n\n\n\nScope: This issue affects the third-party RMM+\nextension for ConnectWise ScreenConnect. Deployments without the extension are\nnot affected. ScreenConnect server or client software are not impacted.","datePublished":"Nov 12, 2026, 6:31:54 PM","dateUpdated":"Nov 12, 2026, 6:31:54 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-127063\nhttps://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-127063\n","enisa_id":"EUVD-2026-124597\n","aliases":"CVE-2026-127063\nGHSA-h94v-vx95-5jpx\n","epss":0.0,"dataProcessed":"Nov 14, 2026, 10:00:43 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}