Login Request a demo
SI
Product
Simplehelp
by Simple-help · last CVE Jun 12, 2026
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities6In the news10Timeline
Severity mix
Critical 2High 4Medium 0Low 0
Severity
All severities6Critical2High4Medium0Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Simplehelp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48558
In wildKEV
10.0
78%
Jun 12
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
Affected: before 5.5.16; 6.0
CVE-2024-57726
RansomwareIn wildKEV
9.9
66%
Jan 15
SimpleHelp Missing Authorization Vulnerability
Affected: before 5.5.8
CVE-2024-57727
RansomwareIn wildKEV
7.5
97%
Jan 15
SimpleHelp Path Traversal Vulnerability
Affected: before 5.5.8
CVE-2024-57728
RansomwareIn wildKEV
7.2
64%
Jan 15
SimpleHelp Path Traversal Vulnerability
Affected: before 5.5.8
CVE-2025-36728
8.8
0%
Jul 25
Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11
Affected: before 5.5.11
CVE-2025-36727
8.8
0%
Jul 25
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12
Affected: before 5.5.12
Showing 6