SimpleHelp SimpleHelp Vulnerability
SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
CVSS Score
9.8
CRITICAL
Published
24 Apr 2026 00:00
Modified
N/A
Vendor
SimpleHelp
Product
SimpleHelp
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-22
Affected Systems
SimpleHelp
SimpleHelp
SimpleHelp
SimpleHelp
External Links
KEV Status
Known Exploited Vulnerability