Lucene search
+L

Exploit for Improper Verification of Cryptographic Signature in Simple-Help Simplehelp

🗓️ 02 Jul 2026 16:11:50Reported by J4ck3LSyN-Gen2Type 
githubexploit
 githubexploit
🔗 github.com👁 78 Views

Critical OpenID Connect bypass in SimpleHelp allows forging tokens to impersonate Technician.

Related
ReporterTitlePublishedViews
Family
Circl
CVE-2026-48558
13 Jun 202615:00
circl
CISA KEV Catalog
SimpleHelp Authentication Bypass Vulnerability
29 Jun 202600:00
cisa_kev
CVE
CVE-2026-48558
12 Jun 202617:07
cve
Cvelist
CVE-2026-48558 SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
12 Jun 202617:07
cvelist
EUVD
EUVD-2026-36509
12 Jun 202617:07
euvd
NVD
CVE-2026-48558
12 Jun 202618:16
nvd
Positive Technologies
PT-2026-48947
12 Jun 202600:00
ptsecurity
Talos Blog
Catan and Mouse
2 Jul 202618:00
talosblog
The Hacker News
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
30 Jun 202611:18
thn
VulnCheck KEV
VulnCheck KEV: CVE-2026-48558
29 Jun 202600:00
vulncheck_kev
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Jul 2026 16:17Current
6.8Medium risk
Vulners AI Score6.8
CVSS 49.5
CVSS 3.110
EPSS0.0116
SSVC
78