ConnectWise patches new flaw allowing ScreenConnect hijacking

ConnectWise disclosed a critical cryptographic signature verification vulnerability (CVE-2026-3564) in ScreenConnect that can allow extraction and misuse of ASP.NET machine keys to forge sessions and gain unauthorized access; the vendor released fixes in ScreenConnect 26.1 (cloud users auto-upgraded) and urges on‑prem administrators to upgrade and harden secrets, while noting researchers observed attempts to abuse disclosed machine key material but there is no confirmed evidence the specific CVE has been exploited in the vendor-hosted service.