CVE-2026-48558 SimpleHelp SimpleHelp
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying…
- CVSS
- 9.5 Critical
- EPSS
- 80%
- Percentile
- 100
- Published
- 2026-06-12
- Force
- 11 of 12
- Public PoC
- 1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
On CISA’s exploited list
SimpleHelp Authentication Bypass Vulnerability
- Added
- 2026-06-29
- Federal patch deadline
- 2026-07-02
- Ransomware use
- not known