CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-06-12
SimpleHelp Authentication Bypass via Missing OIDC Signature Verification (CVE-2026-48558)
[Affected Scope] SimpleHelp versions 5.5.15 and prior, and 6.0 pre-release versions with OIDC authentication configured
[Impact] Unauthenticated remote attackers can forge identity tokens to bypass authentication, gain full technician sessions, and potentially bypass multi-factor authentication (MFA)
[Mitigation] Immediately upgrade SimpleHelp to the patched version or disable OIDC authentication until the patch is applied