SimpleHelp
Vulnerability activity for SimpleHelp: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 3
- With exploit code
- 3
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 10.0CriticalJun 29, 2026SimpleHelp Crypto / certificateCVE-2026-48558Affected: SimpleHelp remote support software Attacker gains: Unauthorized access to remote support sessions Recommended action: Update to the latest version of SimpleHelp softwareAdded to KEV Jun 29, 2026Exploited78% likelyExploit codeMetasploit · NucleiDetection
- 9.9CriticalApr 24, 2026SimpleHelp Auth bypass / access controlCVE-2024-57726SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.Added to KEV Apr 24, 2026Exploited66% likelyExploit codeNucleiDetection
- 7.2HighApr 24, 2026SimpleHelp Path traversal / file handlingCVE-2024-57728SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.Added to KEV Apr 24, 2026Exploited64% likelyExploit codeNucleiDetection
- 9.1CriticalJan 15, 2025SimpleHelp Path traversal / file handlingCVE-2024-57727SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.Added to KEV Feb 13, 2025 · 29 days after publicationExploited97% likelyExploit codeMetasploit · NucleiDetection
Recent
- 10.0CriticalJun 29, 2026SimpleHelp Crypto / certificateCVE-2026-48558Affected: SimpleHelp remote support software Attacker gains: Unauthorized access to remote support sessions Recommended action: Update to the latest version of SimpleHelp softwareExploited78% likelyExploit codeMetasploit · NucleiDetection
- 7.2HighApr 24, 2026SimpleHelp Path traversal / file handlingCVE-2024-57728SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.Exploited64% likelyExploit codeNucleiDetection
- 9.9CriticalApr 24, 2026SimpleHelp Auth bypass / access controlCVE-2024-57726SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.Exploited66% likelyExploit codeNucleiDetection
- 9.1CriticalJan 15, 2025SimpleHelp Path traversal / file handlingCVE-2024-57727SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords.Exploited97% likelyExploit codeMetasploit · NucleiDetection
Top products
- SimpleHelp3 CVEs in the last year, 2 critical, 3 exploited
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.