CVE-2024-57726criticalunder attackransomwareCWE-862

CVE-2024-57726

Published · Updated

Follow this CVE+ Monitor SimpleHelp

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

85Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.9epss 66%
from disclosure to weapon
Published on NVDJan 15
CISA KEV+464d
Action required by CISAfederal deadline: 2026-05-08

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

SimpleHelp remote support software versions 5.5.7 and earlier allow technicians with basic permissions to create API keys that grant them full admin access. An attacker with low-level technician access can abuse this to take complete control of the server.

Technical detail

CWE-862 (Missing Authorization) allows unauthenticated or insufficiently privileged technicians to generate API keys with unrestricted permissions, enabling privilege escalation from technician role to server administrator. The vulnerability affects SimpleHelp v5.5.7 and prior; exploitation requires valid technician credentials but no additional server-side controls validate API key permission scope.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
n/a · n/a