What is the CVSS score of CVE-2026-6066?

CVE-2026-6066 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Automate are affected by CVE-2026-6066?

ConnectWise Automate Solution Center transmits sensitive client data in unencrypted communications, exposing confidential information to network interception by authenticated users with network…

How to fix or mitigate CVE-2026-6066?

Within 24 hours: Inventory all ConnectWise Automate Solution Center deployments and identify which versions are deployed (all versions before 2026.4 are affected). Within 7 days: Implement network segmentation to restrict Solution Center traffic to trusted network segments only and deploy TLS/SSL inspection or network monitoring to detect unencrypted sensitive data transmission. Within 30 days: Contact ConnectWise for patch availability timeline for version 2026.4 and plan upgrade; evaluate whether to migrate to alternative solutions if patch timeline is unacceptable.

Automate CVE-2026-6066

EUVD-2026-23875 HIGH

Cleartext Transmission of Sensitive Information (CWE-319)

2026-04-20 ConnectWise

GHSA-h2v9-xpqq-69hx

Information Disclosure Automate Connectwise

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Re-analysis Queued

Apr 20, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 20, 2026 - 16:24 vuln.today

EUVD ID Assigned

Apr 20, 2026 - 16:00 euvd

EUVD-2026-23875

Analysis Generated

Apr 20, 2026 - 16:00 vuln.today

CVE Published

Apr 20, 2026 - 15:26 nvd

HIGH 7.1

DescriptionCVE.org

ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-server communications could occur without transport-layer encryption. This could allow network‑based interception of Solution Center traffic in Automate deployments. The issue has been resolved in Automate 2026.4 by enforcing secure communication for affected Solution Center connections.

AnalysisAI

Unencrypted client-server communications in ConnectWise Automate Solution Center expose sensitive data to network interception in all versions before 2026.4. Remote authenticated attackers with network access can capture Solution Center traffic containing potentially high-value confidential information (CVSS:3.1 C:H). No active exploitation confirmed at time of analysis. EPSS data unavailable for this recent CVE.

Technical ContextAI

ConnectWise Automate is a remote monitoring and management (RMM) platform used by managed service providers (MSPs) to administer client endpoints and infrastructure. The Solution Center component handles critical administrative communications between Automate clients and servers. CWE-319 (Cleartext Transmission of Sensitive Information) indicates that certain Solution Center protocol exchanges transmitted data over unencrypted channels, violating secure communication standards for privileged management traffic. In RMM platforms, such traffic typically contains credentials, configuration data, command execution payloads, and system state information. The vulnerability affects all Automate deployments prior to version 2026.4, as confirmed by EUVD-2026-23875 and the vendor's CPE designation (cpe:2.3:a:connectwise:automate:*:*:*:*:*:*:*:*).

RemediationAI

Upgrade to ConnectWise Automate version 2026.4 or later, which enforces transport-layer encryption for all affected Solution Center connections per the vendor bulletin at https://www.connectwise.com/company/trust/security-bulletins/2026-04-20-connectwise-automate-bulletin. As an interim compensating control where immediate patching is not feasible, implement network segmentation to isolate Solution Center traffic onto dedicated VLANs with restricted access, deploy TLS-terminating reverse proxies to encrypt Solution Center communications externally (trade-off: adds architectural complexity and may break non-HTTP protocols), and enable comprehensive network traffic logging to detect potential interception attempts (trade-off: generates significant log volume requiring SIEM capacity). Rotate credentials for all Automate service accounts and administrator users after patching, as previously transmitted credentials may have been captured during the vulnerability window. Review historical network flow logs for anomalous traffic patterns to Solution Center endpoints on standard RMM ports. These workarounds provide defense-in-depth but do not eliminate the underlying plaintext transmission risk - patching to 2026.4 remains the only complete remediation.