Advisories · Technology

SimpleHelp.

Every CVE that names SimpleHelp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-48558 CVE record

CVSS 9.5 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
- SimpleHelp
- Weak cryptography or TLS
Not analysed yet 12 Jun 2026
CVE-2025-36728 CVE record

CVSS 6.3 Medium

SimpleHelp Cross Site Request Forgery
- Simplehelp
- Cross-site request forgery (CSRF)
Not analysed yet 25 Jul 2025
CVE-2025-36727 CVE record

CVSS 8.3 High

SimpleHelp Inclusion of functionality from untrusted control sphere
- Simplehelp
- CWE-829
Not analysed yet 25 Jul 2025