CVE Watch—

CVE-2024-57726

SimpleHelp Missing Authorization Vulnerability

CVSS

—

Sem CVSS

EPSS

66.4%

p99

KEV

SIM

24 de abr. de 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

66.4%EPSS · 30 dias66.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SimpleHelp / SimpleHelp

Vulnerabilidade

SimpleHelp Missing Authorization Vulnerability

Adicionado ao KEV

24 de abr. de 2026

Corrigir até

8 de mai. de 2026

Uso conhecido em ransomware

Sim

Descrição resumida

SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier ; https://nvd.nist.gov/vuln/detail/CVE-2024-57726

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-4855810.0 CRÍ

99.6%

KEV—80SimpleHelp Authentication Bypass Vulnerability29d CVE-2024-577277.5 ALT

99.9%

KEV—80SimpleHelp Path Traversal Vulnerability94d CVE-2024-57728—

99.2%

KEV—80SimpleHelp Path Traversal Vulnerability—