Description
SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
CISA Known Exploited Vulnerability
Date added 2026-04-24 | Due date 2026-05-08
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
References
www.microsoft.com/...igh-tempo-medusa-ransomware-operations/
www.trendmicro.com/...light/ransomware-spotlight-dragonforce
www.cisa.gov/...erabilities-catalog?field_cve=CVE-2024-57726
www.horizon3.ai/...es-in-simplehelp-remote-support-software/
simple-help.com/kb---security-vulnerabilities-01-2025