Vendor
Simplehelp
6 known vulnerabilities in products by Simplehelp, 4 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
4
Actively exploited (KEV)
3
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-57726 | SimpleHelp Missing Authorization Vulnerability In CISA KEVRansomware | 9.9 | |
| Critical | CVE-2024-57727 | SimpleHelp Path Traversal Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2026-48558 | SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification In CISA KEValso in 1 other product | 10.0 | |
| Critical | CVE-2024-57728 | SimpleHelp Path Traversal Vulnerability In CISA KEVRansomware | 7.2 | |
| High | CVE-2025-36727 | SimpleHelp Inclusion of functionality from untrusted control sphere | 8.3 | |
| High | CVE-2025-36728 | SimpleHelp Cross Site Request Forgery | 6.3 |
News
- Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealerthehackernews,
- 'Djinn' Stealer Targets Cloud, AI Credentialsdarkreading,
- Critical SimpleHelp flaw exploited to deploy new stealer malwarebleepingcomputer,
- SimpleHelp and SharePoint Vulnerabilities Added to KEV with Three-Day Mitigation Deadlinessans-newsbites-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,
- CISA Adds Four CVEs to KEV; All Were Disclosed a Year or More Agosans-newsbites-mail,
Products
| Simplehelp | 6 | 4 |