SimpleHelp SimpleHelp Vulnerability
SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
CVSS Score
9.8
CRITICAL
Published
24 Apr 2026 00:00
Modified
N/A
Vendor
SimpleHelp
Product
SimpleHelp
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-862
Affected Systems
SimpleHelp
SimpleHelp
SimpleHelp
SimpleHelp
External Links
KEV Status
Known Exploited Vulnerability