CVE-2024-57726

Severity

CRITICAL

CVSS

9.9

EPSS

0.08632

Risk score

67.62

CISA KEV

Yes

PoC

Published

2025-01-15

Modified

2026-08-04

First seen

2026-08-07

Aliases

EUVD-2024-53724, GHSA-8388-C89M-3X67

Products

SimpleHelp:SimpleHelp, n/a:n/a n/a

Sources

cisa.gov CVE-2024-57726
euvd EUVD-2024-53724

Description

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2024-57726
https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53724
https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/