PoC Index

CVE-2024-57726

KEV RANSOMWARECRITICAL 9.9EPSS 66.6%

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

CVSS v3.1
9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v3.1
9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
66.60% chance of exploitation in the next 30 days, 99th percentile
CISA KEV
added 2026-04-24, used in ransomware campaigns
Nuclei
critical · CWE-862
Published
2025-01-15
Updated
2026-08-04

Nuclei templates (1)

References

Related