SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass

SimpleHelp = 5.5.15 and 6.0 pre-release contain an authentication bypass caused by lack of cryptographic signature verification in OIDC tokens, letting remote unauthenticated attackers gain technician sessions, exploit requires OIDC authentication configured. id: CVE-2026-48558 info: name:...

...[ More ]

This Metasploit module exploits CVE-2026-48558 to forge an OpenID Connect identity token and obtain a SimpleHelp technician session. It then uses SimpleHelps legitimate remote access WebSocket protocol to connect to an online managed machine and execute a payload through the remote terminal. An...

Exploit for Improper Verification of Cryptographic Signature in Simple-Help Simplehelp

CVE-2026-48558: SimpleHelp OIDC Authentication Bypass !WAR...

CVE-2026-48558

creationtimestamp| type| source ---|---|--- 2026-06-13 15:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo6jgxce6n2p 2026-06-14 17:33:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobcidnjl72t 2026-06-15 16:30:48+00:00| seen|...

SimpleHelp OIDC Authentication Bypass Remote Code Execution

This module exploits CVE-2026-48558 to forge an OpenID Connect identity token and obtain a SimpleHelp technician session. It then uses SimpleHelp's legitimate remote access WebSocket protocol to connect to an online managed machine and execute a payload through the remote terminal. An OIDC provid...

CVE-2025-48558

creationtimestamp| type| source ---|---|--- 2025-09-12 16:15:49+00:00| seen| https://t.me/cKure/15380...

CVE-2023-48558

creationtimestamp| type| source ---|---|--- 2024-01-06 09:51:34+00:00| seen| https://t.me/ctinow/163870...

CVE-2023-48558 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48558

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with JavaScript executed in a victim’s browser when visiting the affect...

Cayin xPost 2.5 SQL Injection / Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote SQL injection vulnerability in Cayin xPost versions 2.5 and below. The wayfindermeetinginput.jsp file's wayfinderseqid parameter can be injected blindly. Since this app bundles MySQL and Apache Tomcat the environment is pretty static and...