SimpleHelp

Records6All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

SimpleHelp records in CISA KEV

TI-2026-35916 SimpleHelp Authentication Bypass Vulnerability CRITICAL 100KEV 2026-06-29 TI-2024-38047 SimpleHelp Missing Authorization Vulnerability CRITICAL 100KEV 2026-04-24 TI-2024-38049 SimpleHelp Path Traversal Vulnerability CRITICAL 91KEV 2026-04-24 TI-2024-38048 SimpleHelp Path Traversal Vulnerability CRITICAL 98KEV 2025-02-13

Components

Products in the NVD configurations · select one to filter the records

Simplehelp 6 records CRITICAL

Records

6 records in Simplehelp · all components

TI-2026-35916 CVE-2026-48558 · GHSA-m93h-gjv2-fmq2

SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification

CRITICAL 100KEV

SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.80786 Published 2026-06-12 Fixed in 5.5.16, 6.0 RC2 CWE-347

TI-2024-38047 CVE-2024-57726 · GHSA-8388-c89m-3x67

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows…

CRITICAL 100KEV

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.66414 Published 2025-01-15 No fix listed CWE-862

TI-2024-38048 CVE-2024-57727 · GHSA-x84r-h282-g729

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path…

CRITICAL 98KEV

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.96833 Published 2025-01-15 No fix listed CWE-22

TI-2024-38049 CVE-2024-57728 · GHSA-mchm-7mqx-7299

SimpleHelp remote support software v5.5.7 and before allows admin users to upload…

CRITICAL 91KEV

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.64468 Published 2025-01-15 No fix listed CWE-22

TI-2025-24925 CVE-2025-36727 · GHSA-gm29-hcq8-qwp5

SimpleHelp Inclusion of functionality from untrusted control sphere

MEDIUM 41

Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00486 Published 2025-07-25 Fixed in 5.5.12 CWE-829

TI-2025-24926 CVE-2025-36728 · GHSA-724v-2m8h-h26v

SimpleHelp Cross Site Request Forgery

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00189 Published 2025-07-25 Fixed in 5.5.11 CWE-352

Open these records in search →

Critical	3
High	3
Medium	0
Low	0
No CVSS	0