Exploit / PoChigh
SimpleHelp OpenID Connect Auth Bypass to RCE [CVE-2026-48558]
AI summary · glm-5.3-flashSummaries by Vani AI
Metasploit adds a module chaining SimpleHelp OpenID Connect authentication bypass to remote code execution, tracked as CVE-2026-48558.
A commit to the Rapid7 Metasploit Framework (dee04cdb) adds an exploit module for CVE-2026-48558, an OpenID Connect authentication bypass in SimpleHelp that can be escalated to remote code execution. SimpleHelp is widely deployed remote access and remote support software, making the auth bypass a serious exposure for exposed deployments. The commit provides public exploit code but the listing does not state observed exploitation.
Key facts
- New Metasploit module targets CVE-2026-48558 in SimpleHelp
- Authentication bypass via OpenID Connect chained to RCE
- Public exploit code now available for defenders to test exposure
- CVEs
- CVE-2026-48558
- Vendors
- Rapid7SimpleHelp
- Products
- Metasploit FrameworkSimpleHelp
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-48558 | Authentication Bypass via Forged OIDC Tokens in SimpleHelp | 9.5 | 78% | KEV | KEV |
From the original article
By jheysel-r7 · github.com
This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.