CVE-2026-48558

🗓️ 12 Jun 2026 17:07:05Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 192 Views

SimpleHelp OIDC authentication bypass allows forged tokens to grant technician access.

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for Improper Verification of Cryptographic Signature in Simple-Help Simplehelp	2 Jul 202616:11	–	githubexploit
Circl	CVE-2026-48558	13 Jun 202615:00	–	circl
CISA KEV Catalog	SimpleHelp Authentication Bypass Vulnerability	29 Jun 202600:00	–	cisa_kev
Cvelist	CVE-2026-48558 SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification	12 Jun 202617:07	–	cvelist
EUVD	EUVD-2026-36509	12 Jun 202617:07	–	euvd
NVD	CVE-2026-48558	12 Jun 202618:16	–	nvd
Positive Technologies	PT-2026-48947	12 Jun 202600:00	–	ptsecurity
Talos Blog	Catan and Mouse	2 Jul 202618:00	–	talosblog
The Hacker News	Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer	30 Jun 202611:18	–	thn
VulnCheck KEV	VulnCheck KEV: CVE-2026-48558	29 Jun 202600:00	–	vulncheck_kev

NVD

Vulners

Node

simple-help simplehelpRange<5.5.16

simple-help simplehelpMatch6.0pre-release

[
  {
    "defaultStatus": "affected",
    "vendor": "SimpleHelp",
    "product": "SimpleHelp",
    "versions": [
      {
        "status": "affected",
        "version": "5.5.0",
        "versionType": "semver",
        "lessThan": "5.5.16"
      },
      {
        "status": "affected",
        "version": "6.0",
        "versionType": "custom",
        "lessThan": "6.0 RC2"
      }
    ]
  }
]

Source	Link
simple-help	www.simple-help.com/release-news
horizon3	www.horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/
simple-help	www.simple-help.com/security/simplehelp-security-update-2026-05
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
blackpointcyber	www.blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/

30 Jun 2026 13:03Current

5.5Medium risk

Vulners AI Score5.5

CVSS 49.5

CVSS 3.110

EPSS0.0116

SSVC