SimpleHelp OpenID Connect Auth Bypass to RCE [CVE-2026-48558]
Metasploit adds a module chaining SimpleHelp OpenID Connect authentication bypass to remote code execution, tracked as CVE-2026-48558.
Stories per day · 30 days
2 RSS
9 stories, newest first · one card per story
Stories tagged #cve-2026-48558
Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack
3
Catan and Mouse
2
U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog
2
Critical SimpleHelp Vulnerability Exploited For Malware Delivery
1
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
4
SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)
3
Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack
3
SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)
2