CVE Watch—

CVE-2024-57726

SimpleHelp Missing Authorization Vulnerability

CVSS

—

Sin CVSS

EPSS

9.3%

p95

KEV

SÍ

24 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

9.3%EPSS · 30 días9.3%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

SimpleHelp / SimpleHelp

Vulnerabilidad

SimpleHelp Missing Authorization Vulnerability

Añadido a KEV

24 abr 2026

Remediar antes de

8 may 2026

Uso conocido en ransomware

Sí

Descripción resumida

SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier ; https://nvd.nist.gov/vuln/detail/CVE-2024-57726

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2024-57727—

99.9%

KEV—80SimpleHelp Path Traversal Vulnerability—CVE-2024-57728—

93.8%

KEV—78SimpleHelp Path Traversal Vulnerability—CVE-2026-4855810.0 CRÍ

63.5%

KEV—69SimpleHelp Authentication Bypass Vulnerability16d