SimpleHelp bug lets hackers create rogue remote support accounts
Teaser from the source
A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on SimpleHelp
Other advisories
- CriticalCVE-2026-48558SimpleHelp: unzureichende Prüfung kryptografischer Signaturen
- CriticalCVE-2026-48558SimpleHelp: unzureichende Prüfung kryptografischer Signaturen
- HighCVE-2025-36728simple-help simplehelp: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2025-36728simple-help simplehelp: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2025-36727Simplehelp: Einbindung von Funktionen aus nicht vertrauenswürdiger Quelle
- HighCVE-2025-36727Simplehelp: Einbindung von Funktionen aus nicht vertrauenswürdiger Quelle
- CriticalCVE-2024-57727SimpleHelp: Path Traversal Vulnerability
- CriticalCVE-2024-57726Die Fernunterstützungssoftware SimpleHelp Version 5.
Other news entries
- Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn StealerNewsThe Hacker News
- Critical SimpleHelp Vulnerability Exploited for Malware DeliveryNewsSecurityWeek
- 'Djinn' Stealer Targets Cloud, AI CredentialsNewsDark Reading
- Critical SimpleHelp flaw exploited to deploy new stealer malwareNewsBleepingComputer
- SimpleHelp and SharePoint Vulnerabilities Added to KEV with Three-Day Mitigation DeadlinesVulnerabilitySANS NewsBites
- SimpleHelp: Lücke in Fernwartungssoftware in freier Wildbahn missbrauchtNewsheise Security
ID