https://pwn.watch/i/connectwise-screenconnect-cve-2025-3935 ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised. Added to CISA KEV on 2025-06-02. en Mon, 02 Jun 2025 00:00:00 GMT https://pwn.watch/i/connectwise-screenconnect-cve-2025-3935 https://pwn.watch/i/connectwise-screenconnect-cve-2025-3935#2025-06-02-e3e58eb7 Mon, 02 Jun 2025 00:00:00 GMT high <p>ConnectWise ScreenConnect: ScreenConnect Improper Authentication Vulnerability: CISA added CVE-2025-3935 to the KEV catalog (due 2025-06-23).</p>