simple-help has 2 CVEs on record between 2025 and 2026. The median CVSS is 8.8 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 100% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —(2)
- Last 90 days
- 0 prev 1
2
Total CVEs
1
Critical
2
CISA KEV
2
Exploited
Worst active — by depth score
CVE-2026-48558Critical· 10.0SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow96CVE-2024-57727High· 7.5SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests91
simple-help vulnerabilities
CVEs affecting simple-help, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-48558Critical· 10.0CISA KEVPoCSimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted…
▾ Hadalsimple-help · simplehelpEPSS 78%via NVD
CVE-2024-57727High· 7.5CISA KEVPoCSimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. Th…
▾ Abyssalsimple-help · simplehelpEPSS 97%via NVD