Lucene search
+L

EUVD-2026-36509

🗓️ 12 Jun 2026 17:07:05Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 55 Views

OIDC bypass in SimpleHelp allows forged tokens to grant technician sessions and may bypass multi factor authentication with no user interaction.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Improper Verification of Cryptographic Signature in Simple-Help Simplehelp
2 Jul 202616:11
githubexploit
circl
Circl
CVE-2026-48558
13 Jun 202615:00
circl
cisa_kev
CISA KEV Catalog
SimpleHelp Authentication Bypass Vulnerability
29 Jun 202600:00
cisa_kev
cve
CVE
CVE-2026-48558
12 Jun 202617:07
cve
cvelist
Cvelist
CVE-2026-48558 SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
12 Jun 202617:07
cvelist
kitploit
Kitploit
CVE-2026-48558
31 Aug 202601:09
kitploit
kitploit
Kitploit
Reports
31 Aug 202610:34
kitploit
metasploit
Metasploit
SimpleHelp OIDC Authentication Bypass Remote Code Execution
12 Jun 202600:00
metasploit
nvd
NVD
CVE-2026-48558
12 Jun 202618:16
nvd
packetstorm
Packet Storm
...[ More ]
2 Sep 202600:00
packetstorm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "a23f7e5c-ea7c-3528-94e0-509c829dbd3d",
        "vendor": {
          "name": "Simplehelp"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6ce314ad-6fcc-332c-b518-a4c50231370b",
        "product": {
          "name": "Simplehelp",
          "vendor": {
            "name": "Simplehelp"
          }
        },
        "product_version": "5.5.0 <5.5.16"
      },
      {
        "id": "e7e36039-9463-30f0-93d8-d5dfa791b9a8",
        "product": {
          "name": "Simplehelp",
          "vendor": {
            "name": "Simplehelp"
          }
        },
        "product_version": "6.0 <6.0 RC2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Jun 2026 18:47Current
5.5Medium risk
Vulners AI Score5.5
CVSS 49.5
CVSS 3.110
EPSS0.30045
SSVC
55