Simplehelp vulnerabilities

3 published CVEs name Simplehelp among the affected products; CISA lists 1 of them as exploited in the wild.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 1
Known exploited: 1

Critical 1High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20252
20261

Known exploitedNewest addition to KEV first

CVE-2026-48558
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
SimpleHelp · SimpleHelp
ExploitedCritical9.5

Newest CVEs

CVE-2026-48558
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
SimpleHelp · SimpleHelp
ExploitedCritical9.5
CVE-2025-36728
SimpleHelp Cross Site Request Forgery
Simplehelp · Simplehelp
Medium6.3
CVE-2025-36727
SimpleHelp Inclusion of functionality from untrusted control sphere
Simplehelp · Simplehelp
High8.3

Products with the most CVEs

Simplehelp3

Most common weaknesses