# CVE-2025-14265: In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension…

Source: https://junglewise.ai/threats/cve-2025-14265-in-versions-of-screenconnect-prior-to-25-8-server-side-validation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-11  
License: CC BY 4.0 with a link back

CVE-2025-14265 · Severity: critical · CVSS 9.1 · Published 2025-12-11

In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the installation and execution of untrusted or arbitrary extensions by authorized or administrative users. Abuse of this behavior could result in the execution of custom code on the server or unauthorized access to application configuration data. This issue affects only the ScreenConnect server component; host and guest clients are not impacted. ScreenConnect 25.8 introduces enhanced server-side configuration handling and integrity checks to ensure only trusted extensions can be installed.

Technologies: [ConnectWise ScreenConnect](https://junglewise.ai/threats/technologies/screenconnect). Vendors: [ConnectWise](https://junglewise.ai/threats/vendors/connectwise).

## Quick answers

**Is CVE-2025-14265 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-14265 being exploited in the wild.

**How severe is CVE-2025-14265?** Critical severity, with a CVSS score of 9.1, published 11 December 2025.

**Which products and versions are affected?** ConnectWise ScreenConnect. The advisory does not name versions.

**Is there a fix for CVE-2025-14265?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-14265?** Check whether you run ConnectWise ScreenConnect. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- ConnectWise ScreenConnect

## Related threats

- [ConnectWise ScreenConnect unauthorized file transfer and execution](https://junglewise.ai/threats/cve-2026-84869-connectwise-screenconnect-unauthorized-file-transfer-and)
- [ConnectWise ScreenConnect improper input validation in Host Pass creation](https://junglewise.ai/threats/cve-2026-11596-connectwise-screenconnect-improper-input-validation-in-host-pass)
- [ConnectWise ScreenConnect path traversal](https://junglewise.ai/threats/cve-2024-1708-connectwise-screenconnect-path-traversal)
- [ConnectWise ScreenConnect improper cryptographic signature verification in server](https://junglewise.ai/threats/cve-2026-3564-connectwise-screenconnect-improper-cryptographic-signature)
- [ConnectWise ScreenConnect remote code execution via ViewState injection](https://junglewise.ai/threats/cve-2025-3935-connectwise-screenconnect-remote-code-execution-via-viewstate)