Connectwise Risk Assessment
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Connectwise Risk Assessment.
By the Year
In 2026 there have been 0 vulnerabilities in Connectwise Risk Assessment. Last year, in 2025 Risk Assessment had 1 security vulnerability published. Right now, Risk Assessment is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 1 | 4.40 |
It may take a day or so for new Risk Assessment vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Connectwise Risk Assessment Security Vulnerabilities
ConnectWise Risk Assessment Hardcoded AES Key Leak (CVE-2025-4876)
CVE-2025-4876
4.4 - Medium
- May 19, 2025
ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained the key can be used to decrypt CSV input files used for authenticated network scanning.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Connectwise Risk Assessment or by Connectwise? Click the Watch button to subscribe.
