Dashboard / CVE-2026-48558

CVE-2026-48558

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication.

CISA Known Exploited Vulnerability

Vendor / Product SimpleHelp — SimpleHelp
Date Added 2026-06-29
Remediation Due 2026-07-02
https://simple-help.com/security/simplehelp-security-update-2026-05 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48558

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
simple-help simplehelp < 5.5.16
simple-help simplehelp 6.0

References & Advisories (5)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

77.66%
Raw Score 0.776590
Percentile 99.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.77659
2026-10-28
0.77659

Intelligence Sources

kev ref →

External Links