CVE-2024-57726

SimpleHelp Missing Authorization Vulnerability

Exploited in attacks Used by ransomware Critical 9.9 Attack chance: 66%

What it is

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

CISA: SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

What to do

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Deadline for US federal agencies: May 8, 2026

Added to the CISA list: April 24, 2026
Published: January 15, 2025
Severity: Critical 9.9 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 66% in the top 0.7% of all known vulnerabilities
Weakness: CWE-862
More details: NVD · CVE.org · CISA

All references (2)

More exploited flaws from SimpleHelp

Added	Vulnerability	Product	Severity	Attack chance
Jun 29, 2026	Authentication BypassCVE-2026-48558	SimpleHelp	Critical 9.5	78%
Apr 24, 2026	Path TraversalCVE-2024-57728used by ransomware	SimpleHelp	High 7.2	64%
Feb 13, 2025	Path TraversalCVE-2024-57727used by ransomware	SimpleHelp	Critical 9.1	97%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.