Simplehelp (Simple-help) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 88 known versions, newest CVE from 2026-06-12. Vendor: Simple-help.

CVEs of Simplehelp

• CVE-2026-48558 - CVSS 10 (critical), 2026-06-12: SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC…
• CVE-2025-36728 - CVSS 8.8 (high), 2025-07-25: Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.
• CVE-2025-36727 - CVSS 8.8 (high), 2025-07-25: Inclusion of Functionality from Untrusted Control Sphere vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.12.
• CVE-2024-57727 - CVSS 9.1 (critical), 2025-01-15: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to…
• CVE-2024-57726 - CVSS 9.9 (critical), 2025-01-15: SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions.…
• CVE-2024-57728 - CVSS 7.2 (high), 2025-01-15: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file…