Simple-help Simplehelp
6 CVEs affecting Simple-help Simplehelp. Latest disclosed: 2026-06-12. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48558 | Critical | 10.0 | 2026-06-12 | SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC aut… |
CVE-2024-57726 | Critical | 9.9 | 2025-01-15 | SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions… |
CVE-2025-36727 | High | 8.3 | 2025-07-25 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12. |
CVE-2024-57727 | High | 7.5 | 2025-01-15 | SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to d… |
CVE-2024-57728 | High | 7.2 | 2025-01-15 | SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (… |
CVE-2025-36728 | Medium | 6.3 | 2025-07-25 | Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11. |