CVE-2024-57726

moderate-risk
Published 2025-01-15

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

Do I need to act?

-
0.30% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.9/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Simple-Help

References (2)

Release Notes https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabi...
Third Party Advisory https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-...
39
/ 100
moderate-risk
Severity 33/34 · Critical
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal