Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2024-57726: Simple Help Missing Authorization Vulnerability

SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2024-57726SimpleHelp
Related
CVE-2026-48558: Simple Help Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Jun 29, 2026
CVE-2024-57728: Simple Help Path Traversal Vulnerability Known Exploited Vulnerabilities · Apr 24, 2026
CVE-2024-57727: Simple Help Path Traversal Vulnerability Known Exploited Vulnerabilities · Feb 13, 2025