{"affected":[{"defaultStatus":"unaffected","product":"RMM+","source":"CNA: ConnectWise","vendor":"DataComm","versions":[{"status":"affected","version":"All extension versions"}]}],"cveId":"CVE-2026-127063","cwes":["CWE-1392"],"description":"The\nthird-party RMM+ extension for ConnectWise ScreenConnect uses a static API\nsecret by default. The value can be changed by an administrator; however,\nenvironments retaining the default value may allow unauthorized access to\nextension API functionality, including the ability to send commands to managed\nagents. This issue is specific to the third-party extension and does not affect\nthe ScreenConnect server or client.\n\n\n\n\n\nScope: This issue affects the third-party RMM+\nextension for ConnectWise ScreenConnect. Deployments without the extension are\nnot affected. ScreenConnect server or client software are not impacted.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.3,"severity":"critical","source":"CNA: ConnectWise","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794510229355,"publishedAt":1794505807196,"references":[{"source":"CNA: ConnectWise","tags":[],"url":"https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-127063"}],"remediation":[{"kind":"fix","source":"CNA: ConnectWise","text":"Cloud: No action required. ConnectWise disabled and removed the\naffected third-party RMM+ extensions from cloud-hosted ScreenConnect\nenvironments.\n\n\n\n\n\nOn-Premise:\n\n\n\n\n\n\n\n  *  Disable the RMM+ extension immediately and verify that it\nremains disabled.\n  *  Do not re-enable or reinstall it pending further guidance."}],"revision":"a896f017a20e7db7f1de9e89c9985ccdff6d26cbc05f95c4d0482ae1c7fc7137","sources":[{"modifiedAt":1794510229355,"name":"CNA: ConnectWise","retrievedAt":1794514245495,"url":"https://www.cve.org/CVERecord?id=CVE-2026-127063"}],"ssvc":{"assessedAt":1794506596134,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-127063","updatedAt":1794514245495}