Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
Affected vendors and products
More on SimpleHelp
Other advisories
- CriticalCVE-2026-48558SimpleHelp: unzureichende Prüfung kryptografischer Signaturen
- CriticalCVE-2026-48558SimpleHelp: unzureichende Prüfung kryptografischer Signaturen
- HighCVE-2025-36728simple-help simplehelp: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2025-36728simple-help simplehelp: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2025-36727Simplehelp: Einbindung von Funktionen aus nicht vertrauenswürdiger Quelle
- HighCVE-2025-36727Simplehelp: Einbindung von Funktionen aus nicht vertrauenswürdiger Quelle
- CriticalCVE-2024-57727SimpleHelp: Path Traversal Vulnerability
- CriticalCVE-2024-57726Die Fernunterstützungssoftware SimpleHelp Version 5.
Other news entries
- Critical SimpleHelp Vulnerability Exploited for Malware DeliveryNewsSecurityWeek
- 'Djinn' Stealer Targets Cloud, AI CredentialsNewsDark Reading
- Critical SimpleHelp flaw exploited to deploy new stealer malwareNewsBleepingComputer
- SimpleHelp and SharePoint Vulnerabilities Added to KEV with Three-Day Mitigation DeadlinesVulnerabilitySANS NewsBites
- SimpleHelp bug lets hackers create rogue remote support accountsNewsBleepingComputer
- SimpleHelp: Lücke in Fernwartungssoftware in freier Wildbahn missbrauchtNewsheise Security
Source: https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html
ID