Simple-help Simplehelp — known CVE vulnerabilities

Every CVE whose affected-product data names Simple-help Simplehelp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2026-48558 — CVSS 10.0 (critical) — actively exploited: SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication…
• CVE-2024-57726 — CVSS 9.9 (critical) — actively exploited: SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with…
• CVE-2025-36727 — CVSS 8.3 (high): Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.
• CVE-2024-57727 — CVSS 7.5 (high) — actively exploited: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated…
• CVE-2024-57728 — CVSS 7.2 (high) — actively exploited: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading…
• CVE-2025-36728 — CVSS 6.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.