Known Exploited Vulnerabilities April 24, 2026 · CISA KEV Catalog

CVE-2024-57728: Simple Help Path Traversal Vulnerability

SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-57728 SimpleHelp
Related: CVE-2026-48558: Simple Help Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Jun 29, 2026
CVE-2024-57726: Simple Help Missing Authorization Vulnerability Known Exploited Vulnerabilities · Apr 24, 2026
CVE-2024-57727: Simple Help Path Traversal Vulnerability Known Exploited Vulnerabilities · Feb 13, 2025