CVE-2024-57726: Simple Help Missing Authorization Vulnerability
SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-57726SimpleHelp
- Related
- CVE-2026-48558: Simple Help Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Jun 29, 2026CVE-2024-57728: Simple Help Path Traversal Vulnerability Known Exploited Vulnerabilities · Apr 24, 2026CVE-2024-57727: Simple Help Path Traversal Vulnerability Known Exploited Vulnerabilities · Feb 13, 2025