Exploit / PoCcriticalExploited in the wild

U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJun 30, 2026 · 20:00 UTC (Jun 30, 2026)3 min read2

Read at securityaffairs.com

Analyze CVE-2026-48558 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-48558 CVE-2024-57726 CVE-2024-57728

Tags: cve-2024-57726 cve-2024-57728 cve-2026-48558 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-57726 +1 related CVE CVE-2024-57728	Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7	9.9 group max	66%	KEVRansomware	Jan 15, 2025 KEV Apr 24, 2026
CVE-2026-48558	Authentication Bypass via Forged OIDC Tokens in SimpleHelp	9.5	78%	KEV	Jun 12, 2026 KEV Jun 29, 2026

From the original article

3 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds a SimpleHelp flaw to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.