Known exploited vulnerabilities
SimpleHelp vulnerabilities attackers have used
Every SimpleHelp vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 4 SimpleHelp vulnerabilities as exploited in the wild, 3 of them added in the last 12 months and 3 used in ransomware campaigns. The most recent is CVE-2026-48558, added Jun 29, 2026. SimpleHelp has the most entries (4).
- In KEV, all time
- 4
- Added, last 12 months
- 3
- Used in ransomware
- 3
- New CVEs this week
- 0
Every SimpleHelp entry in CISA KEV
CVE-2026-48558
Added · dueSimpleHelp Authentication Bypass Vulnerability
SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a…
SimpleHelp Path Traversal Vulnerability
SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host…
SimpleHelp Missing Authorization Vulnerability
SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
SimpleHelp Path Traversal Vulnerability
SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server…
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.